Opensource-workshop Connect-cms — known CVE vulnerabilities

Every CVE whose affected-product data names Opensource-workshop Connect-cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2026-32276 — CVSS 8.8 (high): Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to…
• CVE-2026-32277 — CVSS 8.7 (high): Connect-CMS is a content management system. In versions 1.35.0 through 1.41.0 and 2.35.0 through 2.41.0, a DOM-based Cross-Site Scripting…
• CVE-2026-32278 — CVSS 8.2 (high): Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to…
• CVE-2026-32300 — CVSS 8.1 (high): Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to…
• CVE-2026-32299 — CVSS 7.5 (high): Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to…
• CVE-2026-32279 — CVSS 6.8 (medium): Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to…