Login Request a demo
MA
Product
Mautic
by Mautic · last CVE Feb 24, 2026
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 3High 5Medium 12Low 1
Severity
All severities21Critical3High5Medium12Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mautic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3105
8.8
0%
Feb 24
SQL Injection in Contact Activity API Sorting
Affected: >= 2.10.0 before < 4.4.19 <5.2.10 <6.0.8 <7.0.1
CVE-2025-13827
8.8
0%
Dec 2
GrapesJsBuilder File Upload allows all file uploads
Affected: <4.4.18, <5.2.9, <6.0.7
CVE-2017-1000489
8.1
1%
Jan 3
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
Affected: 2.9.0; 2.9.2; 2.10.0; 2.11.0
CVE-2018-10189
7.5
1%
Apr 17
An issue was discovered in Mautic 1.x and 2.x before 2.13.0
Affected: 1.0.0 through 1.4.1; 2.0.0 before 2.13.0
CVE-2017-1000046
7.5
1%
Jul 17
Mautic 2.6.1 and earlier fails to set flags on session cookies
Affected: through 2.6.1
Showing 5