{"items":[{"id":"CVE-2026-71435","published":"2026-08-06T19:37:54.834Z","updated":"2026-08-08T02:31:25.913Z","title":"Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template","severity":"MEDIUM","score":6.1,"vendor":"statamic","product":"cms","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-71434","published":"2026-08-06T19:34:48.880Z","updated":"2026-08-07T17:09:29.808Z","title":"Statamic: Missing file upload validation on frontend forms allows uploading disallowed file types","severity":"MEDIUM","score":5.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-64662","published":"2026-08-06T19:30:35.445Z","updated":"2026-08-07T16:06:25.327Z","title":"Statamic: Missing authorization on navigation endpoint allows disclosure of restricted entries","severity":"MEDIUM","score":6.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2026-64663","published":"2026-08-06T19:28:06.165Z","updated":"2026-08-07T17:38:59.964Z","title":"Statamic: Unsafe method invocation via Antlers template resolution allows data destruction","severity":"MEDIUM","score":6.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2026-64665","published":"2026-08-06T19:25:01.756Z","updated":"2026-08-07T17:09:33.394Z","title":"Statamic: Account takeover via OAuth email matching without email-verification check","severity":"HIGH","score":8.1,"vendor":"statamic","product":"cms","kev":false,"epss":0.0054,"kevAdded":null},{"id":"CVE-2026-64664","published":"2026-08-06T19:22:29.620Z","updated":"2026-08-07T15:37:51.817Z","title":"Statamic: Missing authorization on Control Panel endpoint allows disclosure of user existence","severity":"MEDIUM","score":4.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2026-71293","published":"2026-08-05T12:38:44.666Z","updated":"2026-08-10T11:47:28.203Z","title":"Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_user Variable","severity":"MEDIUM","score":6.2,"vendor":"statamic","product":"cms","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-54243","published":"2026-07-17T20:24:53.576Z","updated":"2026-07-20T13:34:48.019Z","title":"Statamic: CSV formula injection in form submission exports","severity":"MEDIUM","score":6.1,"vendor":"statamic","product":"cms","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-54242","published":"2026-07-17T20:23:42.129Z","updated":"2026-07-20T15:31:25.686Z","title":"Statamic: Server-Side Request Forgery via Glide (DNS rebinding)","severity":"MEDIUM","score":4.9,"vendor":"statamic","product":"cms","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-54244","published":"2026-07-17T20:22:35.728Z","updated":"2026-07-20T19:11:22.297Z","title":"Statamic: Incorrect authorization lets view-only users submit Live Preview content reserved for editors","severity":"LOW","score":3.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2026-49288","published":"2026-06-19T18:11:53.331Z","updated":"2026-06-22T17:51:34.960Z","title":"Statamic CMS missing authorization on Control Panel fieldtype endpoints allows disclosure of restricted resources","severity":"MEDIUM","score":4.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-49287","published":"2026-06-19T17:36:23.536Z","updated":"2026-06-22T14:22:02.202Z","title":"Statamic CMS vulnerable to unsafe method invocation via collection sorting allows data destruction","severity":"HIGH","score":7.4,"vendor":"statamic","product":"cms","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2026-45660","published":"2026-05-29T16:43:34.231Z","updated":"2026-05-29T19:36:42.883Z","title":"Statamic: Server-Side Request Forgery via Glide","severity":"MEDIUM","score":5.4,"vendor":"statamic","product":"cms","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2026-44306","published":"2026-05-12T21:30:36.390Z","updated":"2026-05-13T18:20:39.730Z","title":"Statamic: Email enumeration via forgot password endpoint","severity":"MEDIUM","score":5.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2026-41175","published":"2026-04-22T21:25:49.585Z","updated":"2026-04-23T13:56:09.912Z","title":"Statamic: Unsafe method invocation via query value resolution allows data destruction","severity":"HIGH","score":8.1,"vendor":"statamic","product":"cms","kev":false,"epss":0.00304,"kevAdded":null},{"id":"CVE-2026-33887","published":"2026-03-27T20:41:23.715Z","updated":"2026-03-30T18:54:25.297Z","title":"Statamic allows unauthorized content access through missing authorization in its revision controllers","severity":"MEDIUM","score":5.4,"vendor":"statamic","product":"cms","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2026-33886","published":"2026-03-27T20:40:22.577Z","updated":"2026-03-31T18:54:03.269Z","title":"Statamic's sensitive configuration values are exposed to content editors via Antlers-enabled fields","severity":"MEDIUM","score":6.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2026-33885","published":"2026-03-27T20:39:17.726Z","updated":"2026-03-31T14:00:13.275Z","title":"Statamic has an Open Redirect on unauthenticated endpoints via URL parsing differential","severity":"MEDIUM","score":6.1,"vendor":"statamic","product":"cms","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2026-33884","published":"2026-03-27T20:38:19.737Z","updated":"2026-03-30T15:37:30.499Z","title":"Statamic's live preview token bypasses content protection for unrelated entries","severity":"MEDIUM","score":4.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-33883","published":"2026-03-27T20:37:21.190Z","updated":"2026-03-30T18:56:50.916Z","title":"Statamic has Reflected XSS via unescaped redirect parameter in its password reset form tag","severity":"MEDIUM","score":6.1,"vendor":"statamic","product":"cms","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-33882","published":"2026-03-27T20:36:31.666Z","updated":"2026-03-31T18:54:08.799Z","title":"Statamic's Markdown preview endpoint exposes sensitive user data","severity":"MEDIUM","score":6.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2026-33177","published":"2026-03-20T21:41:36.485Z","updated":"2026-03-23T16:49:26.359Z","title":"Statamic is missing authorization check on taxonomy term creation via fieldtype","severity":"MEDIUM","score":4.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-33172","published":"2026-03-20T21:40:46.736Z","updated":"2026-03-25T13:46:16.341Z","title":"Statamic has Stored XSS via SVG Sanitization Bypass","severity":"HIGH","score":8.7,"vendor":"statamic","product":"cms","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-33171","published":"2026-03-20T21:39:40.048Z","updated":"2026-03-23T21:41:51.358Z","title":"Statamic has a path traversal in file dictionary fieldtype","severity":"MEDIUM","score":4.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2026-32612","published":"2026-03-12T21:47:21.697Z","updated":"2026-03-13T16:38:42.464Z","title":"Statamic: privilege escalation via stored cross-site scripting","severity":"MEDIUM","score":5.4,"vendor":"statamic","product":"cms","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2026-28426","published":"2026-02-27T22:23:42.660Z","updated":"2026-03-02T19:39:23.113Z","title":"Statamic vulnerable to privilege escalation via stored cross-site scripting","severity":"HIGH","score":8.7,"vendor":"statamic","product":"cms","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2026-28425","published":"2026-02-27T22:20:39.735Z","updated":"2026-03-25T20:57:16.308Z","title":"Statamic vulnerable to remote code execution via Antlers-enabled control panel inputs","severity":"HIGH","score":8,"vendor":"statamic","product":"cms","kev":false,"epss":0.00499,"kevAdded":null},{"id":"CVE-2026-28424","published":"2026-02-27T22:14:01.779Z","updated":"2026-03-02T19:36:06.660Z","title":"Statamic's missing authorization allows access to email addresses","severity":"MEDIUM","score":6.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2026-28423","published":"2026-02-27T22:11:55.802Z","updated":"2026-03-02T21:48:43.597Z","title":"Statamic Vulnerable to Server-Side Request Forgery via Glide","severity":"MEDIUM","score":6.8,"vendor":"statamic","product":"cms","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2026-27939","published":"2026-02-27T21:34:39.107Z","updated":"2026-03-02T22:03:16.580Z","title":"Statamic allows Authenticated Control Panel users to escalate privileges via elevated session bypass","severity":"HIGH","score":8.8,"vendor":"statamic","product":"cms","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2026-27593","published":"2026-02-24T21:38:17.354Z","updated":"2026-02-27T20:56:07.561Z","title":"Statamic is vulnerable to account takeover via password reset link injection","severity":"CRITICAL","score":9.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.0052,"kevAdded":null},{"id":"CVE-2026-27196","published":"2026-02-21T04:30:05.184Z","updated":"2026-02-24T18:59:19.390Z","title":"Statamic affected by privilege escalation via stored Cross-site Scripting","severity":"HIGH","score":8.1,"vendor":"statamic","product":"cms","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2026-25759","published":"2026-02-11T20:37:37.741Z","updated":"2026-02-12T21:18:56.237Z","title":"Statmatic affected by privilege escalation via stored cross-site scripting","severity":"HIGH","score":8.7,"vendor":"statamic","product":"cms","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-25633","published":"2026-02-11T20:33:51.930Z","updated":"2026-02-12T21:19:37.486Z","title":"Statamic's missing authorization allows access to assets","severity":"MEDIUM","score":4.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2025-64112","published":"2025-10-30T17:47:01.280Z","updated":"2025-10-30T17:58:06.993Z","title":"Statmatic vulnerable to Stored Cross-Site Scripting","severity":"HIGH","score":8,"vendor":"statamic","product":"cms","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2024-52600","published":"2024-11-19T16:30:12.221Z","updated":"2024-12-03T17:18:17.282Z","title":"Statamic CMS has Path Traversal in Asset Upload","severity":"MEDIUM","score":5.3,"vendor":"statamic","product":"cms","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2024-36119","published":"2024-05-30T20:57:06.445Z","updated":"2024-08-02T03:30:12.952Z","title":"Password confirmation stored in plain text via registration form in statamic/cms","severity":"LOW","score":1.8,"vendor":"statamic","product":"cms","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2024-24570","published":"2024-02-01T16:42:57.717Z","updated":"2025-06-17T21:29:22.712Z","title":"Statamic account takeover via XSS and password reset link","severity":"HIGH","score":8.2,"vendor":"statamic","product":"cms","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2023-48701","published":"2023-11-21T22:34:11.043Z","updated":"2024-08-02T21:37:53.540Z","title":"Statamic CMS vulnerable to Cross-site Scripting via uploaded assets","severity":"HIGH","score":7.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.007,"kevAdded":null},{"id":"CVE-2023-48217","published":"2023-11-14T21:38:37.590Z","updated":"2024-08-30T14:03:24.570Z","title":"Remote code execution via form uploads in statamic/cms","severity":"HIGH","score":8.8,"vendor":"statamic","product":"cms","kev":false,"epss":0.01104,"kevAdded":null},{"id":"CVE-2023-47129","published":"2023-11-10T18:48:03.265Z","updated":"2024-09-03T17:24:55.886Z","title":"Statamic CMS remote code execution via front-end form uploads","severity":"HIGH","score":8.4,"vendor":"statamic","product":"cms","kev":false,"epss":0.01121,"kevAdded":null},{"id":"CVE-2023-36828","published":"2023-07-05T21:30:06.196Z","updated":"2024-10-24T18:06:44.250Z","title":"Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG","severity":"MEDIUM","score":5.5,"vendor":"statamic","product":"cms","kev":false,"epss":0.00655,"kevAdded":null},{"id":"CVE-2022-24784","published":"2022-03-25T21:40:11.000Z","updated":"2025-04-23T18:43:26.208Z","title":"Discoverability of user password hash in Statamic CMS","severity":"LOW","score":3.7,"vendor":"statamic","product":"cms","kev":false,"epss":0.01034,"kevAdded":null}]}