What’s Vulnerable › Products

Exponent CMS vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Exponent CMS version is affected

Latest Exponent CMS vulnerabilities

• CVE-2026-108900 — Exponent CMS XML-RPC xmlrpc.php userLogin sql injection (CVSS 7.3)