CRITICAL

[NEU] [hoch] Drupal Erweiterungen: Mehrere Schwachstellen

BSI Germany • Sep 03, 2026

HIGH

Multiples vulnérabilités dans SPIP (01 septembre 2026)

CERT-FR (ANSSI) • Sep 01, 2026

HIGH

[webapps] Payload CMS 3.72.0 - Blind SQL Injection

Exploit-DB • Sep 01, 2026

MEDIUM

[webapps] Bludit CMS - Stored XSS

Exploit-DB • Sep 01, 2026

CRITICAL

[webapps] Grav CMS 2.0.7 - RCE

Exploit-DB • Sep 01, 2026

HIGH

[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass

Exploit-DB • Sep 01, 2026

MEDIUM

[webapps] EasyAppointments 1.5.1 - Blind SQL Injection

Exploit-DB • Sep 01, 2026

CRITICAL

[NEU] [hoch] DNN: Mehrere Schwachstellen

BSI Germany • Aug 26, 2026

CRITICAL

[NEU] [kritisch] TYPO3 Extensions: Mehrere Schwachstellen

BSI Germany • Aug 26, 2026

CRITICAL

[NEU] [hoch] Contao: Mehrere Schwachstellen

BSI Germany • Aug 25, 2026

HIGH

[NEU] [UNGEPATCHT] [hoch] Drupal Module: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

BSI Germany • Aug 20, 2026

CRITICAL

[NEU] [hoch] Joomla: Mehrere Schwachstellen

BSI Germany • Aug 19, 2026

CRITICAL

[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

Exploit-DB • Aug 10, 2026

MEDIUM

[NEU] [mittel] Drupal (Token Content Access, Disable Login Page und Powerful Surveys): Mehrere Schwachstellen

BSI Germany • Jul 30, 2026

HIGH

WordPress Multiple Vulnerabilities

HKCERT • Jul 20, 2026

CRITICAL

Australian businesses targeted in global content management system exploitation campaign

SC Media • Jul 13, 2026

HIGH

Australia warns of global campaign targeting vulnerable CMS platforms

BleepingComputer • Jul 11, 2026

MEDIUM

[UPDATE] [mittel] Joomla: Mehrere Schwachstellen

BSI Germany • Jul 09, 2026

CRITICAL

[NEU] [hoch] Joomla: Mehrere Schwachstellen

BSI Germany • Jul 08, 2026

HIGH

[NEU] [mittel] Drupal: Mehrere Schwachstellen

BSI Germany • Jun 25, 2026

CRITICAL

Max severity Joomla Content Editor extension flaw targeted in automated attacks

SC Media • Jun 17, 2026

MEDIUM

CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages

Microsoft Security Response Center • Jun 13, 2026

HIGH

CVE-2026-42768 Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

Microsoft Security Response Center • Jun 13, 2026

MEDIUM

Multiples vulnérabilités dans Typo3 (10 juin 2026)

CERT-FR (ANSSI) • Jun 10, 2026

HIGH

[NEU] [hoch] TYPO3 Core: Mehrere Schwachstellen

BSI Germany • Jun 09, 2026

CRITICAL

[webapps] Grav CMS 2.0.0-beta.2 - Remote Code Execution

Exploit-DB • May 26, 2026

HIGH

700+ education and tech websites hijacked in huge ClickFix malware campaign

Malwarebytes Labs • May 26, 2026

CRITICAL

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

The Hacker News • May 23, 2026

CRITICAL

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure

SecurityWeek • May 22, 2026

MEDIUM

Vulnérabilité dans SPIP (22 mai 2026)

CERT-FR (ANSSI) • May 22, 2026

HIGH

DotNetNuke CMS vulnerability allows server compromise via malicious SVG uploads

SC Media • Apr 30, 2026

HIGH

[NEU] [mittel] TYPO3 Core: Schwachstelle ermöglicht Offenlegung von Informationen

BSI Germany • Apr 21, 2026

HIGH

CVE-2026-28389 Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

Microsoft Security Response Center • Apr 15, 2026

HIGH

CVE-2026-28390 Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

Microsoft Security Response Center • Apr 15, 2026

MEDIUM

[NEU] [mittel] Drupal Core: Mehrere Schwachstellen

BSI Germany • Apr 16, 2026

HIGH

Smart Slider updates hijacked to push malicious WordPress, Joomla versions

BleepingComputer • Apr 09, 2026

MEDIUM

[NEU] [mittel] Drupal (Orejime): Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 09, 2026

HIGH

[webapps] WBCE CMS 1.6.4 - Remote Code Execution

Exploit-DB • Apr 06, 2026

HIGH

[webapps] RiteCMS 3.1.0 - Authenticated Remote Code Execution

Exploit-DB • Apr 06, 2026

INFO

Metasploit Wrap-Up 04/03/2026

Rapid7 Research • Apr 03, 2026

INFO

Cloudflare’s new CMS is not a WordPress killer, it’s a WordPress alternative

CSO Online • Apr 03, 2026

CRITICAL

[NEU] [hoch] Joomla CMS: Mehrere Schwachstellen

BSI Germany • Apr 01, 2026

MEDIUM

[NEU] [mittel] Drupal Automated Logout Extension: Schwachstelle ermöglicht Manipulation von Dateien

BSI Germany • Mar 19, 2026

HIGH

[NEU] [mittel] TYPO3 Extensions: Mehrere Schwachstellen

BSI Germany • Mar 17, 2026

HIGH

[UPDATE] [hoch] TYPO3 Core: Mehrere Schwachstellen

BSI Germany • Mar 16, 2026

HIGH

[NEU] [mittel] Drupal Extensions: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

BSI Germany • Mar 12, 2026

HIGH

Throwing a spark into FuelCMS (0-click RCE)

Reddit r/netsec • Mar 11, 2026

MEDIUM

[NEU] [mittel] Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

BSI Germany • Mar 11, 2026

MEDIUM

Vulnérabilité dans SPIP (06 mars 2026)

CERT-FR (ANSSI) • Mar 06, 2026

LOW

DSA-6155-1 spip - security update

Debian Security • Mar 03, 2026