Advisories · Technology

ImpressCMS.

Every CVE that names ImpressCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73679 CVE record

CVSS 8.6 High

ImpressCMS Authenticated RCE via PHP Custom Tag eval()
- ImpressCMS
- Code injection
Not analysed yet 14 Aug 2026
CVE-2021-47938 CVE record

CVSS 8.7 High

ImpressCMS 1.4.2 Remote Code Execution via Autotasks
- ImpressCMS
- Code injection
Not analysed yet 10 May 2026
CVE-2019-25703 CVE record

CVSS 7.1 High

ImpressCMS 1.3.11 SQL Injection via bid Parameter
- ImpressCMS
- SQL injection
Not analysed yet 12 Apr 2026
CVE-2022-50912 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

ImpressCMS 1.4.4 - Unrestricted File Upload
- ImpressCMS
- Unrestricted file upload
Not analysed yet 13 Jan 2026