What’s Vulnerable › Products

OctoberCMS vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your OctoberCMS version is affected

Latest OctoberCMS vulnerabilities

• CVE-2026-100909 — OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery (CVSS 7.3)