Advisories · Technology

Pimcore.

Every CVE that names Pimcore among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109392 CVE record

CVSS 5.1 Medium

Pimcore through 2026.3.1 Stored XSS via ExternalImage Field Version Preview
- Pimcore
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2024-49370 CVE record

CVSS 8.7 High

Change-Password via Portal-Profile sets PimcoreBackendUser password without hashing
- pimcore
- CWE-256
Not analysed yet 23 Oct 2024
CVE-2020-26246 CVE record

CVSS 7.7 High

Authorization bypass in Pimcore
- pimcore
- Broken access control
Not analysed yet 3 Dec 2020