Login Request a demo
CC
Product
Concrete CMS
by Concrete CMS · last CVE Sep 16, 2026
118
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities118In the news0Timeline
Severity mix
Critical 2High 34Medium 71Low 11
Severity
All severities118Critical2High34Medium71Low11
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Concrete CMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-85385
9.6
1%
Sep 16
Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone Field
Affected: 5.0.0 through 9.5.3
CVE-2026-18119
9.0
0%
Sep 14
Concrete CMS below 9.5.3 is vulnerable to Stored XSS via unsanitized inline block custom style values
Affected: 5.0.0 through 9.5.2
Showing 2