Concretecms Concrete Cms vulnerabilities
198 published vulnerabilities in Concretecms Concrete Cms. The most were published in 2026 (95), and 95 so far in 2026.
Concretecms Concrete Cms vulnerabilities by year
2011
2014
2015
2017
2018
2020
2021
2022
2023
2024
2025
2026
Most exploited Concretecms Concrete Cms vulnerabilities
- CVE-2023-48648 Concrete CMS allows unauthorized access because directories can be created with insecure permissions
- CVE-2022-21829 Code injection in concrete CMS
- CVE-2021-22958 Server-Side Request Forgery vulnerability in concrete5
- CVE-2021-40098 Path traversal in n/a
- CVE-2026-8134 Concrete CMS Vulnerable to Relative Path Traversal
- CVE-2022-30117 Path traversal in Concrete CMS
- CVE-2021-40102 Deserialization in n/a
- CVE-2026-8135 Concrete CMS Vulnerable to Deserialization of Untrusted Data
- CVE-2026-3452 Concrete CMS below 9.4.8 is vulnerable to stored deserialization leading to RCE in the Express Entry List block.
- CVE-2022-43693 Concrete CMS vulnerable to Cross-site Request Forgery
- CVE-2021-22954 Cross Site Request Forgery in concrete5/concrete5
- CVE-2021-22966 Improper Privilege Management in Concrete CMS
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.