Craft

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Craft records in CISA KEV

No Craft vulnerabilities are listed in CISA KEV.

2 records

TI-2026-12470 CVE-2026-14794 · GHSA-rvmm-v933-jgxq

LOW 24

A flaw has been found in Craft CMS up to 4.18.0.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00385 Published 2026-07-06 Fixed in 4.18.1, 5.10.3 CWE-266

TI-2026-12469 CVE-2026-14793 · GHSA-9p7c-v5x3-rfx8

LOW 24

A vulnerability was detected in Craft CMS up to 4.18.0.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00386 Published 2026-07-06 Fixed in 4.18.1, 5.10.3 CWE-285