[ Vendor · 3 CVEs ]
BackdropCMS
CVEs affecting BackdropCMS published in the last 30 days, plus any BackdropCMS CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111442 | 16 Oct 2026 | CVSS 5.3 | BackdropCMS BackdropBackdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially… | |
| CVE-2026-110907 | 15 Oct 2026 | CVSS 7.5 | BackdropCMS BackdropBackdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or… | |
| CVE-2026-107914 | 9 Oct 2026 | CVSS 7.8 | backdropcms BackdropBackdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This… |