CVE-2025-68455

Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-RC1 through 4.16.16 are vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior. Note that attackers must have administrator access to the Craft Control Panel for...

CVE-2025-68455

creationtimestamp| type| source ---|---|--- 2026-01-03 22:16:18+00:00| published-proof-of-concept| https://github.com/craftcms/cms/security/advisories/GHSA-255j-qw47-wjh5 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg 2026-01-05 23:05:33+00:00|...