Concrete CMS: versions, end of support and vulnerabilities
Release branches of Concrete CMS with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 198 vulnerabilities for Concrete CMS, 0 of them actively exploited. Last checked on 02/11/2026.
Release branches
Concrete CMS 9
Latest version: 9.5.7, released on 20/10/2026
End of support: no date known
No known vulnerability open in 9.5.7
Concrete CMS 8
Latest version: 8.5.21, released on 05/08/2025
End of support: 05/08/2025
74 known vulnerabilities open in 8.5.21
Concrete CMS 5.7
Latest version: 5.7.5.13, released on 23/10/2019
End of support: 23/10/2019
135 known vulnerabilities open in 5.7.5.13
Concrete CMS 5.6
Latest version: 5.6.4.0, released on 26/02/2019
End of support: 26/02/2019
135 known vulnerabilities open in 5.6.4.0
Most recent vulnerabilities of Concrete CMS
- CVE-2026-85387, CVSS 4.0: 2.0, 16/09/2026
- CVE-2026-18120, CVSS 4.0: 6.3, 16/09/2026
- CVE-2026-87031, CVSS 4.0: 2.1, 16/09/2026
- CVE-2026-87028, CVSS 4.0: 5.3, 16/09/2026
- CVE-2026-85386, CVSS 4.0: 7.3, 16/09/2026
- CVE-2026-85385, CVSS 4.0: 7.7, 16/09/2026
- CVE-2026-81927, CVSS 4.0: 1.8, 15/09/2026
- CVE-2026-81926, CVSS 4.0: 2.0, 15/09/2026
- CVE-2026-18426, CVSS 4.0: 2.0, 15/09/2026
- CVE-2026-81925, CVSS 4.0: 2.1, 15/09/2026
Get notified
Add Concrete CMS with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Concrete CMS