Octobercms October vulnerabilities
57 published vulnerabilities in Octobercms October, 1 of them exploited in the wild. The most were published in 2020 (13), and 5 so far in 2026.
Octobercms October vulnerabilities by year
2015
2017
2018
2020
2021
2022
2023
2024
2025
2026
Most exploited Octobercms October vulnerabilities
- CVE-2021-32648 October CMS Improper Authentication
- CVE-2021-3311 October CMS Session ID not invalidated after logout
- CVE-2017-1000194 October CMS File Upload Vulnerability
- CVE-2017-1000196 Code injection in n/a
- CVE-2017-1000197 Path traversal in n/a
- CVE-2023-44382 October CMS safe mode bypass using Twig sandbox escape
- CVE-2021-32649 Authenticated file write leads to remote code execution in october/system
- CVE-2021-32650 Arbitrary code execution in october/system
- CVE-2017-16941 File upload in n/a
- CVE-2017-16244 October CMS CSRF
- CVE-2022-24800 Race Condition in October CMS upload process
- CVE-2018-1999009 October CMS Local File Inclusion
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.