What’s Vulnerable › Products

hubzero-cms vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your hubzero-cms version is affected

Latest hubzero-cms vulnerabilities

• CVE-2026-92984 — HUBzero CMS through 2.2.32 Session Fixation via Query-String Session Identifier (CVSS 8.1)
• CVE-2026-92970 — HUBzero CMS through 2.2.32 Path Traversal via File Upload (CVSS 8.8)