Skip to content
OpenAdvisories

Product · statamic

cms

47 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-124427

    Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients…

    statamic cms
  • Critical 9.3
    CVE-2026-27593

    Statamic is vulnerable to account takeover via password reset link injection

    Statmatic is a Laravel and Git powered content management system (CMS). Prior to versions 6.3.3 and 5.73.10, an attacker may leverage a vulnerability in the password reset feature to capture a user's token and reset the password on their behalf. The attacker …

    statamic cms statamic/cms Packagist