29 matches found
PT-2026-141168
Name of the Vulnerable Software and Affected Versions CraftCMS CMS versions prior to 4.18.9 CraftCMS CMS versions prior to 5.11.2 Description An unauthenticated SQL injection exists on the front end of sites using the element search endpoint. The issue occurs because the attribute parameter is...
CLSA-2026-1793226310 TuxCare security update for craftcms/cms (1 CVE)
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 4.18.9-p2+tuxcare...
CLSA-2026-1793192483 TuxCare security update for craftcms/cms (2 CVEs)
TuxCare rebuilt craftcms/cms to address 2 CVEs. Fixed in 4.18.7-p3+tuxcare...
CLSA-2026-1791989783 TuxCare security update for craftcms/cms (3 CVEs)
TuxCare rebuilt craftcms/cms to address 3 CVEs. Fixed in 4.18.9-p1+tuxcare...
PT-2026-122649
TuxCare rebuilt craftcms/cms to address 3 CVEs. Fixed in 4.18.9-p1+tuxcare...
CLSA-2026-1790174106 TuxCare security update for craftcms/cms (1 CVE)
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p10+tuxcare...
PT-2026-105398
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p10+tuxcare...
PT-2026-98329
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 4.18.7-p1+tuxcare...
CLSA-2026-1788430341 TuxCare security update for craftcms/cms (4 CVEs)
TuxCare rebuilt craftcms/cms to address 4 CVEs. Fixed in 3.9.15-p9+tuxcare...
PT-2026-90914
TuxCare rebuilt craftcms/cms to address 4 CVEs. Fixed in 3.9.15-p9+tuxcare...
Improper Authorization
Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Improper Authorization via the password reset process. An attacker can gain unauthorized access to administrator accounts by resetting passwords without providing the current password or havi...
CLSA-2026-1786625623 TuxCare security update for craftcms/cms (1 CVE)
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p8+tuxcare...
PT-2026-80152
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p8+tuxcare...
CLSA-2026-1784077481 TuxCare security update for craftcms/cms (3 CVEs)
TuxCare rebuilt craftcms/cms to address 3 CVEs. Fixed in 3.9.15-p6+tuxcare...
CLSA-2026-1783386121 TuxCare security update for craftcms/cms (1 CVE)
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p4+tuxcare...
PT-2026-74562
TuxCare rebuilt craftcms/cms to address 3 CVEs. Fixed in 3.9.15-p3+tuxcare...
PT-2026-74443
TuxCare rebuilt craftcms/cms to address 2 CVEs. Fixed in 3.9.15-p2+tuxcare...
PT-2026-74105
TuxCare rebuilt craftcms/cms to address 10 CVEs. Fixed in 3.9.15-p1+tuxcare...