Craft CMS

Platform

Threat entity extracted from intelligence sources

Frequency

8

occurrences

First Seen

April 12, 2026

Last Seen

September 9, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (5)

Critical RCE Vulnerability in Craft CMS (CVE-2026-31857) Exposed

Apr 12·2 sources

ACSC Issues Critical Alert on Exploited CMS Vulnerabilities

Jul 9·10 sources

Critical RCE Vulnerabilities in Craft CMS Versions Before 5.10.12

1d ago·2 sources

Craft CMS Vulnerability CVE-2026-55794 Allows Authenticated RCE via HTTP Referrer

Jul 7·2 sources

Two Remote Code Execution Vulnerabilities Disclosed in Content Management Systems

1d ago·2 sources

Related Articles (8)

CVE-2026-86732 - OSV

Osv.Dev·1d ago

Craft Cms 5.0.0 Rc1 Before 5.10.12 Behavior Injection Rce

www.vulncheck.com·1d ago

Craft Cms Before 5.10.12 Remote Code Execution Via Element Index

www.vulncheck.com·1d ago

Second alert from ACSC in two months shows unpatched CMS bugs still exploited

Itnews.Au·Jul 9

nvd.nist.gov /vuln/detail/CVE-2026-55794

nvd.nist.gov·Jul 7

1 / 2

Related Entities

Zero-day Exploit Malware Remote Code Execution Grafana Australia CVE-2026-55794 CVE-2026-31857 CVE-2026-21720 CVE-2026-86732 CWE-94 - Code Injection Cwe-502 - Deserialization Of Untrusted Data ClickFix