Concrete CMS 9
There is no known end-of-support date for Concrete CMS 9.
Latest version: 9.5.7, released on 20/10/2026
End of support: no date known
No known vulnerability open in 9.5.7
Vulnerabilities in Concrete CMS 9
159 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.
- CVE-2023-48648, CVSS 3.1: 9.8: fixed in 9.2.2
- CVE-2022-21829, CVSS 3.1: 9.8: fixed in 9.1.0
- CVE-2026-8134, CVSS 4.0: 9.4: not affected in 9.5.7
- CVE-2022-30117, CVSS 3.1: 9.1: fixed in 9.1.0
- CVE-2026-8135, CVSS 4.0: 8.9: not affected in 9.5.7
- CVE-2026-3452, CVSS 4.0: 8.9: fixed in 9.4.8
- CVE-2022-43693, CVSS 3.1: 8.8: not affected in 9.5.7
- CVE-2026-18110, CVSS 4.0: 8.7: fixed in 9.5.3
- CVE-2026-81895, CVSS 4.0: 8.5: fixed in 9.5.3
- CVE-2026-81894, CVSS 4.0: 8.5: fixed in 9.5.3
- CVE-2026-18111, CVSS 4.0: 8.5: fixed in 9.5.3
- CVE-2026-81896, CVSS 4.0: 8.4: fixed in 9.5.3
- CVE-2026-85385, CVSS 4.0: 7.7: fixed in 9.5.4
- CVE-2026-81897, CVSS 4.0: 7.7: fixed in 9.5.3
- CVE-2026-8428, CVSS 4.0: 7.5: fixed in 9.5.1
- CVE-2026-8426, CVSS 4.0: 7.5: fixed in 9.5.1
- CVE-2026-8421, CVSS 4.0: 7.5: fixed in 9.5.1
- CVE-2026-8417, CVSS 4.0: 7.5: fixed in 9.5.1
- CVE-2026-8350, CVSS 4.0: 7.5: not affected in 9.5.7
- CVE-2026-8140, CVSS 4.0: 7.5: not affected in 9.5.7
- CVE-2021-22970, CVSS 3.1: 7.5: not affected in 9.5.7
- CVE-2026-85386, CVSS 4.0: 7.3: fixed in 9.5.4
- CVE-2026-8203, CVSS 4.0: 7.3: not affected in 9.5.7
- CVE-2026-8197, CVSS 4.0: 7.3: not affected in 9.5.7
- CVE-2026-81900, CVSS 4.0: 7.3: fixed in 9.5.3
- CVE-2026-18117, CVSS 4.0: 7.3: fixed in 9.5.4
- CVE-2026-18116, CVSS 4.0: 7.3: fixed in 9.5.3
- CVE-2026-81901, CVSS 4.0: 7.2: fixed in 9.5.3
- CVE-2026-81902, CVSS 4.0: 7.1: fixed in 9.5.3
- CVE-2026-81903, CVSS 4.0: 7.0: fixed in 9.5.3
- CVE-2026-18119, CVSS 4.0: 7.0: fixed in 9.5.3
- CVE-2026-6826, CVSS 4.0: 6.9: fixed in 9.5.1
- CVE-2026-30662, CVSS 3.1: 6.5: not affected in 9.5.7
- CVE-2022-43686, CVSS 3.1: 6.5: not affected in 9.5.7
- CVE-2026-8337, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-8240, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-8239, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-8238, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-8237, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-8236, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-8205, CVSS 4.0: 6.3: not affected in 9.5.7
- CVE-2026-8204, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-7881, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-7879, CVSS 4.0: 6.3: fixed in 9.5.1
- CVE-2026-18120, CVSS 4.0: 6.3: fixed in 9.5.4
- CVE-2022-43690, CVSS 3.1: 6.3: not affected in 9.5.7
- CVE-2026-81907, CVSS 4.0: 6.1: fixed in 9.5.3
- CVE-2023-28475, CVSS 3.1: 6.1: fixed in 9.2.0
- CVE-2022-43968, CVSS 3.1: 6.1: not affected in 9.5.7
- CVE-2022-43967, CVSS 3.1: 6.1: not affected in 9.5.7
- CVE-2022-43694, CVSS 3.1: 6.1: not affected in 9.5.7
- CVE-2022-43692, CVSS 3.1: 6.1: not affected in 9.5.7
- CVE-2022-43556, CVSS 3.1: 6.1: not affected in 9.5.7
- CVE-2022-30120, CVSS 3.1: 6.1: fixed in 9.1.0
- CVE-2022-30119, CVSS 3.1: 6.1: fixed in 9.1.0
- CVE-2022-30118, CVSS 3.1: 6.1: fixed in 9.1.0
- CVE-2026-8245, CVSS 4.0: 6.0: fixed in 9.5.1
- CVE-2026-81910, CVSS 4.0: 5.9: fixed in 9.5.3
- CVE-2026-81911, CVSS 4.0: 5.8: fixed in 9.5.3
- CVE-2026-81912, CVSS 4.0: 5.7: fixed in 9.5.4
- CVE-2023-48649, CVSS 3.1: 5.4: fixed in 9.2.2
- CVE-2023-44765, CVSS 3.1: 5.4: not affected in 9.5.7
- CVE-2023-44764, CVSS 3.1: 5.4: not affected in 9.5.7
- CVE-2023-44763, CVSS 3.1: 5.4: not affected in 9.5.7
- CVE-2023-44762, CVSS 3.1: 5.4: not affected in 9.5.7
- CVE-2023-44761, CVSS 3.1: 5.4: not affected in 9.5.7
- CVE-2023-28820, CVSS 3.1: 5.4: fixed in 9.1.0
- CVE-2023-28819, CVSS 3.1: 5.4: fixed in 9.1.0
- CVE-2023-28477, CVSS 3.1: 5.4: fixed in 9.2.0
- CVE-2023-28476, CVSS 3.1: 5.4: fixed in 9.2.0
- CVE-2023-28474, CVSS 3.1: 5.4: fixed in 9.2.0
- CVE-2023-28471, CVSS 3.1: 5.4: fixed in 9.2.0
- CVE-2022-43687, CVSS 3.1: 5.4: not affected in 9.5.7
- CVE-2026-87028, CVSS 4.0: 5.3: fixed in 9.5.3
- CVE-2026-8327, CVSS 4.0: 5.3: fixed in 9.5.1
- CVE-2026-81913, CVSS 4.0: 5.3: fixed in 9.5.3
- CVE-2026-68526, CVSS 4.0: 5.3: fixed in 9.5.3
- CVE-2023-28821, CVSS 3.1: 5.3: fixed in 9.1.0
- CVE-2023-28472, CVSS 3.1: 5.3: fixed in 9.2.0
- CVE-2022-43691, CVSS 3.1: 5.3: not affected in 9.5.7
- CVE-2022-43689, CVSS 3.1: 5.3: not affected in 9.5.7
- CVE-2026-81917, CVSS 4.0: 5.1: fixed in 9.5.3
- CVE-2026-81916, CVSS 4.0: 5.1: fixed in 9.5.3
- CVE-2026-81915, CVSS 4.0: 5.1: fixed in 9.5.3
- CVE-2026-68535, CVSS 4.0: 5.1: fixed in 9.5.3
- CVE-2025-3153, CVSS 4.0: 5.1: fixed in 9.4.0
- CVE-2024-8291, CVSS 4.0: 5.1: fixed in 9.3.3
- CVE-2024-4350, CVSS 4.0: 5.1: fixed in 9.3.3
- CVE-2026-81918, CVSS 4.0: 4.8: fixed in 9.5.3
- CVE-2026-3244, CVSS 4.0: 4.8: fixed in 9.4.8
- CVE-2026-3242, CVSS 4.0: 4.8: fixed in 9.4.8
- CVE-2026-3241, CVSS 4.0: 4.8: fixed in 9.4.8
- CVE-2026-3240, CVSS 4.0: 4.8: fixed in 9.4.8
- CVE-2025-8571, CVSS 4.0: 4.8: fixed in 9.4.3
- CVE-2025-0660, CVSS 4.0: 4.8: fixed in 9.4.0
- CVE-2024-3181, CVSS 3.1: 4.8: fixed in 9.2.8
- CVE-2024-3180, CVSS 3.1: 4.8: fixed in 9.2.8
- CVE-2024-3179, CVSS 3.1: 4.8: fixed in 9.2.8
- CVE-2024-3178, CVSS 3.1: 4.8: fixed in 9.2.8
- CVE-2024-2753, CVSS 3.1: 4.8: fixed in 9.2.8
And 59 more.
Get notified
Add Concrete CMS with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Concrete CMS 9