CM
Product
CMB2
by jtsternberg · last CVE Oct 28, 2026
3
CVEs
0
On KEV
7.2
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add CMB2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116761
New
5.4–Oct 28
CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form
Affected: through 2.13.4
Showing 1