Known exploited vulnerabilities
October CMS vulnerabilities attackers have used
Every October CMS vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 1 October CMS vulnerability as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2021-32648, added Jan 18, 2022. October CMS has the most entries (1).
- In KEV, all time
- 1
- Added, last 12 months
- 0
- Used in ransomware
- 0
- New CVEs this week
- 0
Every October CMS entry in CISA KEV
CVE-2021-32648
Added · dueOctober CMS Improper Authentication
In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.