CC
Product
Craft Cms
by Craftcms · last CVE Mar 24, 2026
On CISA KEVExploited in the wild
97
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 31Medium 55Low 0
Watch

Add Craft Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-23209
In wildKEV
8.1
22%
Jan 18
Potential RCE with a compromised security key in craft/cms
Affected: after 4.0.0 before 4.13.8; after 5.0.0 before 5.5.8; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +2 more
Showing 1