Advisories · Technology

Strapi Open Source and Enterprise Headless CMS.

Every CVE that names Strapi Open Source and Enterprise Headless CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118171 CVE record

CVSS 6.5 Medium

CVE-2026-118171
- Strapi Open Source and Enterprise Headless CMS
- Broken access control
Not analysed yet 27 Oct 2026
CVE-2026-118172 CVE record

CVSS 6.1 Medium

CVE-2026-118172
- Strapi Open Source and Enterprise Headless CMS
- Server-side request forgery (SSRF)
Not analysed yet 27 Oct 2026
CVE-2026-118170 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

CVE-2026-118170
- Strapi Open Source and Enterprise Headless CMS
- Broken access control
Not analysed yet 27 Oct 2026