Known Vulnerabilities for Concrete Cms by Concretecms
Listed below are 10 of the newest known vulnerabilities associated with "Concrete Cms" by "Concretecms".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48764 json | TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once a... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-42812 json | In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and w... | Not Provided | 2026-05-04 | 2026-05-04 |
| CVE-2026-31424 json | In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_ta... | Not Provided | 2026-04-13 | 2026-05-11 |
| CVE-2026-10721 json | Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and ... | Not Provided | 2026-06-10 | 2026-06-10 |
| CVE-2026-8435 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVe... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8434 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMul... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8433 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan().... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8432 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star(). T... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8428 json | Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the ... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8427 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFav... | Not Provided | 2026-05-21 | 2026-05-22 |