Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • L
Cross-site Scripting (XSS)CVE-2026-8139
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8410
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Access Control BypassCVE-2026-8240
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Missing AuthorizationCVE-2026-8237
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8434
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Improper Validation of Specified Type of InputCVE-2026-7887
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Cross-site Scripting (XSS)CVE-2026-8245
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Missing AuthorizationCVE-2026-8236
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8426
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Scripting (XSS)CVE-2026-8203
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-7881
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Incorrect AuthorizationCVE-2026-8350
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Authorization Bypass Through User-Controlled KeyCVE-2026-8204
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Direct Request ('Forced Browsing')CVE-2026-8205
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8427
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8416
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Sensitive Cookie with Improper SameSite AttributeCVE-2026-8413
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Improper Privilege ManagementCVE-2026-8327
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8411
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8409
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Server-side Request Forgery (SSRF)CVE-2026-7890
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-8435
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8140
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Deserialization of Untrusted DataCVE-2026-8135
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Information ExposureCVE-2026-6826
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8417
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • L
Cross-site Request Forgery (CSRF)CVE-2026-7882
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Scripting (XSS)CVE-2026-8197
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • M
Missing AuthorizationCVE-2026-7879
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
  • H
Cross-site Request Forgery (CSRF)CVE-2026-8428
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026