What’s Vulnerable › Products

October CMS vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your October CMS version is affected

Latest October CMS vulnerabilities

• CVE-2026-101005 — October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery (CVSS 7.3)