Craft CMS security advisory (AV26-1086)

Canadian Centre for Cyber Security Version 1 original current

Imported from official source

Serial number: AV26-1086Date: October 26, 2026 As of October 23, 2026, Craft CMS is affected by vulnerabilities in the following products: CMS Prior to 4.18.9 Prior to 5.11.2 Commerce-mollie Prior to 4.4.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. craftcms/cms 5.11.2 craftcms/commerce-mollie 4.4.3 Craft CMS Seccurity Advisories

This version

Version
1 of 1
Recorded
October 26, 2026 16:00
Change
Initial
Content hash
276ff9dec8d9c07f3c9345c2c59d9248
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.