CVE-2025-32432 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
March 23, 2026
Last Seen
July 10, 2026

CVE-2025-32432 is a vulnerability tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed March 23, 2026; most recent activity July 10, 2026.

Related Threat Clusters

  • ACSC Issues Critical Alert on Exploited CMS Vulnerabilities

    The Australian Cyber Security Centre (ACSC) has issued a second alert in two months regarding a large-scale hacking campaign exploiting unpatched vulnerabilities in content management systems (CMS). The campaign targets…

    10 articles · Updated July 9, 2026
  • CISA Alerts on Active Exploitation of Craft CMS Code Injection Vulnerability

    CISA has added a critical vulnerability in Craft CMS, tracked as CVE-2025-32432, to its Known Exploited Vulnerabilities catalog due to confirmed active exploitation. This code injection flaw is categorized under CWE-94…

    16 articles · Updated March 23, 2026
  • Multiple Vulnerabilities Discovered in Substance3D Software

    On March 10, 2026, three critical vulnerabilities were published affecting Substance3D software. CVE-2026-21365 and CVE-2026-27219 both impact Substance3D - Painter versions 11.1.2 and earlier, exposing users to…

    179 articles · Updated March 11, 2026

Recent Intelligence Reports

  • CVE-2025-32432 — nvd.nist.gov · July 10, 2026
  • Second alert from ACSC in two months shows unpatched CMS bugs still exploited — Itnews.Au · July 9, 2026
  • CISA Warns of Craft CMS Code Injection Vulnerability Exploited in Attacks — Cybersecuritynews · March 23, 2026
  • CISA Warns of Craft CMS Code Injection Flaw Exploited in Active Attacks — Gbhackers · March 23, 2026

Related Entities

Malware Australia CVE-2023-41892 ClickFix Vidar Stealer T1505.003 - Web Shell Craft CMS Joomla MaxSite CMS MetInfo CMS WordPress

CVSS v3.1 Breakdown