What’s Vulnerable › Products

Pimcore GmbH Pimcore CMS/DXP vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Pimcore GmbH Pimcore CMS/DXP version is affected

Latest Pimcore GmbH Pimcore CMS/DXP vulnerabilities

• CVE-2026-11407 — Pimcore CMS 12.3.8 Twig Sandbox Bypass via SecurityPolicy checkMethodAllowed (CVSS 7.2)