CR
Vendor
Craft
3
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-14794 | CM CMS Craft | 4.3 | Jul 6 | Craft CMS Charts Endpoint ChartsController.php actionGetNewUsersData improper authorization |
| CVE-2026-14793 | CM CMS Craft | 4.3 | Jul 6 | Craft CMS reorder-sets Endpoint GlobalsController.php actionReorderSets authorization |
| CVE-2025-35939 In wildKEV | CM CMS Craft | 5.3 | May 7 | Craft CMS stores user-provided content in session files |