october
- Software type
- Content management system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/13/2026, october recorded 1 security vulnerability in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of october and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-49400October CMS: PHP Object Injection via Backend Widget Session StorageCVE-2026-29179October: Editor Sub-Permission Bypass for Asset and Blueprint File OperationsCVE-2026-27937October: Reflected XSS via DataTable Form WidgetCVE-2026-26274October: Safe Mode Bypass via Twig Database Write OperationsCVE-2026-26067October: Safe Mode Bypass via CSS Preprocessor Compilers| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-49400October CMS: PHP Object Injection via Backend Widget Session Storage | Exploitation statusNot exploited | FixYes |
| SeverityLow |
CVE-2026-29179October: Editor Sub-Permission Bypass for Asset and Blueprint File Operations | Exploitation statusNot exploited | FixYes | Published04/21/2026 | SeverityLow |
|---|
CVE-2026-27937October: Reflected XSS via DataTable Form Widget | Exploitation statusNot exploited | FixYes | Published04/21/2026 | SeverityLow |
|---|
CVE-2026-26274October: Safe Mode Bypass via Twig Database Write Operations | Exploitation statusNot exploited | FixYes | Published04/21/2026 | SeverityMedium |
|---|
CVE-2026-26067October: Safe Mode Bypass via CSS Preprocessor Compilers | Exploitation statusNot exploited | FixYes | Published04/21/2026 | SeverityMedium |
|---|
CVE-2026-25133October CMS has Stored XSS via SVG Filter Bypass | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-25125October CMS: Environment Variable Exfiltration via INI Parser Interpolation | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-24907October CMS has Stored XSS via Event Log Mail Preview | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-24906October CMS has Stored XSS in its Backend Editor Markup Classes | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
CVE-2026-22692October CMS: Twig Sandbox Bypass via Collection Methods | Exploitation statusNot exploited | FixYes | Published04/14/2026 | SeverityMedium |
|---|
62 Results | Page 1 of 7