Craft CMS

• CVE-2025-35939 Medium 5.3 Exploited Craft CMS stores user-provided content in session files 1.3%
• CVE-2026-14794 Medium 4.3 Craft CMS Charts Endpoint ChartsController.php actionGetNewUsersData improper authorization 0.4%
• CVE-2026-14793 Medium 4.3 Craft CMS reorder-sets Endpoint GlobalsController.php actionReorderSets authorization 0.4%