World Wires · story 112621 · official · 1 source(s)

Critical CVE-2026-123488 in Craft CMS

Craft CMS versions prior to 4.18.9 and 5.11.2 contain an unauthenticated SQL injection vulnerability allowing remote attackers to read and write the databa

Open in the desk

Coverage

• Critical CVE-2026-123488 in Craft CMS NVD: critical CVEs · tier A · clear net · 2026-11-06 15:17 UTC

What this site indexes