Advisories · Technology

Backdrop.

Every CVE that names Backdrop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111442 CVE record

CVSS 5.3 Medium

Cross-site scripting in Backdrop
- Backdrop
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2026
CVE-2026-110907 CVE record

CVSS 7.5 High

Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.
- Backdrop
- CWE-669
Not analysed yet 15 Oct 2026
CVE-2026-107914 CVE record

CVSS 7.8 High

Incomplete cleanup in Backdrop
- Backdrop
- CWE-459
Not analysed yet 9 Oct 2026
CVE-2026-104476 CVE record

CVSS 8.2 High

Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive
- backdrop
- Information disclosure
Not analysed yet 2 Oct 2026
CVE-2025-25063 CVE record

CVSS 4.4 Medium

Cross-site scripting in backdrop
- backdrop
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2025
CVE-2025-25062 CVE record

CVSS 4.4 Medium

Cross-site scripting in backdrop
- backdrop
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2025