Concrete CMS 8
Support for Concrete CMS 8 ended on 05/08/2025. There are no more security updates for this branch.
Latest version: 8.5.21, released on 05/08/2025
End of support: 05/08/2025
74 known vulnerabilities open in 8.5.21
Vulnerabilities in Concrete CMS 8
141 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.
- CVE-2026-8134, CVSS 4.0: 9.4: still open in 8.5.21
- CVE-2026-8135, CVSS 4.0: 8.9: still open in 8.5.21
- CVE-2026-3452, CVSS 4.0: 8.9: still open in 8.5.21
- CVE-2021-22954, CVSS 3.1: 8.8: still open in 8.5.21
- CVE-2026-81895, CVSS 4.0: 8.5: still open in 8.5.21
- CVE-2026-81894, CVSS 4.0: 8.5: still open in 8.5.21
- CVE-2026-81896, CVSS 4.0: 8.4: still open in 8.5.21
- CVE-2026-85385, CVSS 4.0: 7.7: still open in 8.5.21
- CVE-2026-81897, CVSS 4.0: 7.7: still open in 8.5.21
- CVE-2026-8428, CVSS 4.0: 7.5: still open in 8.5.21
- CVE-2026-8426, CVSS 4.0: 7.5: still open in 8.5.21
- CVE-2026-8421, CVSS 4.0: 7.5: still open in 8.5.21
- CVE-2026-8417, CVSS 4.0: 7.5: still open in 8.5.21
- CVE-2026-8350, CVSS 4.0: 7.5: still open in 8.5.21
- CVE-2026-8140, CVSS 4.0: 7.5: still open in 8.5.21
- CVE-2026-85386, CVSS 4.0: 7.3: still open in 8.5.21
- CVE-2026-8203, CVSS 4.0: 7.3: still open in 8.5.21
- CVE-2026-8197, CVSS 4.0: 7.3: still open in 8.5.21
- CVE-2026-81900, CVSS 4.0: 7.3: still open in 8.5.21
- CVE-2026-18116, CVSS 4.0: 7.3: still open in 8.5.21
- CVE-2026-18119, CVSS 4.0: 7.0: still open in 8.5.21
- CVE-2026-6826, CVSS 4.0: 6.9: still open in 8.5.21
- CVE-2026-8337, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-8240, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-8239, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-8238, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-8237, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-8236, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-8205, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-8204, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-7881, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-7879, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-18120, CVSS 4.0: 6.3: still open in 8.5.21
- CVE-2026-81907, CVSS 4.0: 6.1: still open in 8.5.21
- CVE-2023-28475, CVSS 3.1: 6.1: still open in 8.5.21
- CVE-2026-8245, CVSS 4.0: 6.0: still open in 8.5.21
- CVE-2026-81912, CVSS 4.0: 5.7: still open in 8.5.21
- CVE-2023-28820, CVSS 3.1: 5.4: still open in 8.5.21
- CVE-2023-28819, CVSS 3.1: 5.4: still open in 8.5.21
- CVE-2023-28477, CVSS 3.1: 5.4: still open in 8.5.21
- CVE-2023-28476, CVSS 3.1: 5.4: still open in 8.5.21
- CVE-2023-28474, CVSS 3.1: 5.4: still open in 8.5.21
- CVE-2023-28471, CVSS 3.1: 5.4: still open in 8.5.21
- CVE-2026-8327, CVSS 4.0: 5.3: still open in 8.5.21
- CVE-2026-68526, CVSS 4.0: 5.3: still open in 8.5.21
- CVE-2023-28821, CVSS 3.1: 5.3: still open in 8.5.21
- CVE-2023-28472, CVSS 3.1: 5.3: still open in 8.5.21
- CVE-2026-81917, CVSS 4.0: 5.1: still open in 8.5.21
- CVE-2026-81916, CVSS 4.0: 5.1: still open in 8.5.21
- CVE-2026-81915, CVSS 4.0: 5.1: still open in 8.5.21
- CVE-2026-81918, CVSS 4.0: 4.8: still open in 8.5.21
- CVE-2026-3244, CVSS 4.0: 4.8: still open in 8.5.21
- CVE-2026-3242, CVSS 4.0: 4.8: still open in 8.5.21
- CVE-2026-3241, CVSS 4.0: 4.8: still open in 8.5.21
- CVE-2026-3240, CVSS 4.0: 4.8: still open in 8.5.21
- CVE-2023-28473, CVSS 3.1: 3.3: still open in 8.5.21
- CVE-2026-8347, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-8340, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-81921, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-81920, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-81919, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-7887, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-7886, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-7882, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-2994, CVSS 4.0: 2.3: still open in 8.5.21
- CVE-2026-81925, CVSS 4.0: 2.1: still open in 8.5.21
- CVE-2026-81924, CVSS 4.0: 2.1: still open in 8.5.21
- CVE-2026-81923, CVSS 4.0: 2.1: still open in 8.5.21
- CVE-2026-81922, CVSS 4.0: 2.1: still open in 8.5.21
- CVE-2026-7890, CVSS 4.0: 2.1: still open in 8.5.21
- CVE-2026-18422, CVSS 4.0: 2.1: still open in 8.5.21
- CVE-2026-85387, CVSS 4.0: 2.0: still open in 8.5.21
- CVE-2026-8139, CVSS 4.0: 2.0: still open in 8.5.21
- CVE-2026-81927, CVSS 4.0: 1.8: still open in 8.5.21
- CVE-2023-48648, CVSS 3.1: 9.8: fixed in 8.5.13
- CVE-2022-21829, CVSS 3.1: 9.8: fixed in 8.5.8
- CVE-2021-40098, CVSS 3.1: 9.8: not affected in 8.5.21
- CVE-2021-22958, CVSS 3.1: 9.8: fixed in 8.5.5
- CVE-2022-30117, CVSS 3.1: 9.1: fixed in 8.5.8
- CVE-2021-40102, CVSS 3.1: 9.1: not affected in 8.5.21
- CVE-2022-43693, CVSS 3.1: 8.8: fixed in 8.5.10
- CVE-2021-40108, CVSS 3.1: 8.8: fixed in 8.5.6
- CVE-2021-40097, CVSS 3.1: 8.8: not affected in 8.5.21
- CVE-2021-22966, CVSS 3.1: 8.8: fixed in 8.5.7
- CVE-2026-18111, CVSS 4.0: 8.5: fixed in 8.5.21
- CVE-2021-40104, CVSS 3.1: 7.5: not affected in 8.5.21
- CVE-2021-40103, CVSS 3.1: 7.5: not affected in 8.5.21
- CVE-2021-22970, CVSS 3.1: 7.5: not affected in 8.5.21
- CVE-2021-22967, CVSS 3.1: 7.5: fixed in 8.5.7
- CVE-2021-22951, CVSS 3.1: 7.5: fixed in 8.5.7
- CVE-2021-40101, CVSS 3.1: 7.2: fixed in 8.5.7
- CVE-2021-40099, CVSS 3.1: 7.2: not affected in 8.5.21
- CVE-2021-36766, CVSS 3.1: 7.2: fixed in 8.5.6
- CVE-2021-22968, CVSS 3.1: 7.2: fixed in 8.5.7
- CVE-2020-24986, CVSS 3.1: 7.2: not affected in 8.5.21
- CVE-2020-11476, CVSS 3.1: 7.2: fixed in 8.5.3
- CVE-2018-13790, CVSS 3.1: 7.2: not affected in 8.5.21
- CVE-2022-43686, CVSS 3.1: 6.5: fixed in 8.5.10
- CVE-2021-22950, CVSS 3.1: 6.5: fixed in 8.5.6
- CVE-2017-8082, CVSS 3.0: 6.5: not affected in 8.5.21
And 41 more.
Get notified
Add Concrete CMS with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Concrete CMS 8