Known Vulnerabilities for Concrete Cms by Concretecms
Listed below are 10 of the newest known vulnerabilities associated with "Concrete Cms" by "Concretecms".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116197 json | Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that ... | Not Provided | 2026-10-25 | 2026-10-29 |
| CVE-2026-114137 json | Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/aut... | Not Provided | 2026-10-21 | 2026-10-23 |
| CVE-2026-113733 json | An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.10. The `django.contrib.admin.utils.display_for_field()... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-111109 json | The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a we... | Not Provided | 2026-10-31 | 2026-11-01 |
| CVE-2026-100750 json | Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets addi... | Not Provided | 2026-09-28 | 2026-09-30 |
| CVE-2026-100528 json | OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affec... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100347 json | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/l... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-98220 json | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix NULL sched deref in kfunc sub-sched error... | Not Provided | 2026-10-06 | 2026-10-19 |
| CVE-2026-95653 json | Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of r... | Not Provided | 2026-09-22 | 2026-09-25 |
| CVE-2026-93805 json | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengt... | Not Provided | 2026-09-24 | 2026-10-03 |