[ Vendor · 1 CVEs ]
sulu
CVEs affecting sulu published in the last 30 days, plus any sulu CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-92692 | 23 Sep 2026 | CVSS 6.9 | Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.0 release… | Fix |