Vendor
craftcms
On CISA KEV3Public exploit5Avg CVSS6.6
CVEs in the catalog
147
since 2023-03
Months in the top 100
5
months with a stored rank
Best rank
#25
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| cms | 120 | 82% |
| commerce | 21 | 14% |
| craft cms | 6 | 4% |
| aws s3 | 1 | 0.7% |
| azure blob | 1 | 0.7% |
| craftcms | 1 | 0.7% |
| google cloud | 1 | 0.7% |
| webhooks | 1 | 0.7% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 32 | 22% |
| CWE-862 | 22 | 15% |
| CWE-639 | 12 | 8% |
| CWE-94 | 12 | 8% |
| CWE-1336 | 10 | 7% |
| CWE-918 | 9 | 6% |
| CWE-89 | 8 | 5% |
| CWE-200 | 7 | 5% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | CVSS | Published |
|---|---|---|---|
| CVE-2026-92594 | CWE-200 | 7.5 | 2026-09-16 |
| CVE-2026-92593 | CWE-94 | 8.8 | 2026-09-16 |
| CVE-2026-92592 | CWE-1336 | 8.8 | 2026-09-16 |
| CVE-2026-92591 | CWE-636 | 5.9 | 2026-09-16 |
| CVE-2026-92590 | CWE-79 | 5.4 | 2026-09-16 |
| CVE-2026-92589 | CWE-862 | 4.3 | 2026-09-16 |
| CVE-2026-55795 | CWE-307 | 6.9 | 2026-09-14 |
| CVE-2026-79987 | CWE-470 | 8.8 | 2026-09-10 |
| CVE-2026-86732 | CWE-94 | 8.8 | 2026-09-08 |
| CVE-2026-86731 | CWE-862 | 6.5 | 2026-09-08 |
| CVE-2026-86730 | CWE-94 | 8.8 | 2026-09-08 |
| CVE-2026-79991 | CWE-89 | 7.1 | 2026-09-02 |
| CVE-2026-79990 | CWE-639 | 8.7 | 2026-09-02 |
| CVE-2026-79989 | CWE-285 | 8.7 | 2026-09-02 |
| CVE-2026-84802 | CWE-862 | 4.3 | 2026-09-02 |