{"items":[{"id":"CVE-2026-115938","published":"2026-10-23T21:58:51.816Z","updated":"2026-11-02T15:03:03.061Z","title":"Low privilege condition filter escapes Twig sandbox, recovers \"securityKey\" and reaches RCE","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115937","published":"2026-10-23T21:50:13.188Z","updated":"2026-11-02T15:00:00.257Z","title":"Unauthenticated payment reuse allows unpaid orders to be marked as paid","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"commerce-mollie","kev":false,"epss":0.00166,"kevAdded":null,"exploit":false},{"id":"CVE-2026-115935","published":"2026-10-23T21:40:57.592Z","updated":"2026-11-02T14:45:41.313Z","title":"Control panel only API response emulation replaces \"securityKey\" and reaches server RCE","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00369,"kevAdded":null,"exploit":false},{"id":"CVE-2026-105985","published":"2026-10-06T10:23:25.037Z","updated":"2026-10-07T03:55:21.500Z","title":"Authenticated RCE via render-components Entry Type overrides","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00688,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79987","published":"2026-09-10T16:05:55.403Z","updated":"2026-09-11T03:56:46.336Z","title":"Low-privilege RCE through element-search eager loading","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00649,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79991","published":"2026-09-02T14:25:15.221Z","updated":"2026-09-02T17:55:14.034Z","title":"Authenticated SQL Injection via nested eager-loading criteria","severity":"HIGH","score":7.1,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00507,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79990","published":"2026-09-02T14:19:54.892Z","updated":"2026-09-02T17:53:23.468Z","title":"GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00449,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79989","published":"2026-09-02T14:11:02.784Z","updated":"2026-09-02T17:51:42.963Z","title":"Arbitrary user password reset leading to administrator account takeover","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00427,"kevAdded":null,"exploit":false},{"id":"CVE-2026-79988","published":"2026-08-27T15:36:18.188Z","updated":"2026-08-28T16:51:38.368Z","title":"Authenticated RCE through Twig sandbox escape","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.00451,"kevAdded":null,"exploit":false},{"id":"CVE-2026-78416","published":"2026-08-24T15:36:07.971Z","updated":"2026-08-26T20:59:03.683Z","title":"Authenticated RCE via `condition.config` JSON cleanse bypass","severity":"HIGH","score":8.7,"vendor":"craftcms","product":"cms","kev":false,"epss":0.0102,"kevAdded":null,"exploit":false},{"id":"CVE-2026-2345","published":"2026-02-11T14:49:44.991Z","updated":"2026-02-11T21:19:08.551Z","title":"Insufficient Origin Validation in Proctorio Chrome Extension postMessage Handlers","severity":"LOW","score":3.6,"vendor":"Proctorio","product":"Secure Exam Proctor Extension","kev":false,"epss":0.00078,"kevAdded":null,"exploit":false}]}