Log in Start free

opensource-workshop

Products

ProductCVEsExploitedLatest
connect-cms6–Mar 23, 2026

Exploited and recent CVEs

  • CVE-2026-32300 High 8.1 Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information 0.3%
  • CVE-2026-32299 High 7.5 Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature 0.3%
  • CVE-2026-32279 Medium 6.8 Connect CMS has SSRF in the External Page Migration Feature of its Page Management Plugin 0.4%
  • CVE-2026-32278 High 8.2 Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form Plugin 0.2%
  • CVE-2026-32277 High 8.7 Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List View 0.3%
  • CVE-2026-32276 High 8.8 Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study Plugin 0.5%