[ Vendor · 2 CVEs ]
plone
CVEs affecting plone published in the last 30 days, plus any plone CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-57576 | 22 Sep 2026 | CVSS 6.5 | plone.app.dexterity has a Denial of Service due to excessive title or description lengthplone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based… | Fix |
| CVE-2026-57149 | 22 Sep 2026 | CVSS 9.9 | plone.app.portlets Vulnerable to Remote Code Execution via TALES Injectionplone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone… | Fix |