dotCMS dotCMS Core vulnerabilities (CVE)

CVE records published for dotCMS dotCMS Core, newest first. Follow to get an email when a new one appears.

1 results

10.0Critical

CVE-2026-8054 5 months ago

Unauthenticated SQL Injection in dotCMS Publish Audit API

dotCMS dotCMS Core

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints (/api/auditPublishing/get and /api/auditPublishing/getAll) in dotCMS Core 25.11.04-1 through 26.04.28-02 allows remote unauthenticated atta…

1.6%EPSS