Advisories · Technology

hubzero-cms.

Every CVE that names hubzero-cms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92984 CVE record

CVSS 8.5 High

HUBzero CMS through 2.2.32 Session Fixation via Query-String Session Identifier
- hubzero-cms
- Authentication bypass
Not analysed yet 17 Sept 2026
CVE-2026-92970 CVE record

CVSS 8.7 High

HUBzero CMS through 2.2.32 Path Traversal via File Upload
- hubzero-cms
- Path traversal
Not analysed yet 17 Sept 2026