CM
Product
cms
by craftcms · last CVE Oct 23, 2026
On CISA KEVExploited in the wild
115
CVEs
3
On KEV
10.0
Max CVSS
16
New 30D
Severity mix
Critical 7High 50Medium 58Low 0
Watch

Add cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-23209
In wildKEV
8.1
22%
Jan 18
Potential RCE with a compromised security key in craft/cms
Affected: >= 5.0.0-RC1, < 5.5.5; >= 4.0.0-RC1, < 4.13.8
Showing 1