CVE Tools
Track your stack

Core

156 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Core, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Core CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Core CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-021
2025-031
2025-043
2025-050
2025-060
2025-070
2025-080
2025-091
2025-103
2025-110
2025-120
2026-011
2026-024
2026-0317
2026-045
2026-0514
2026-064
2026-074
2026-089
2026-0943
2026-102

Severity

How the 156 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1913%
  • High6644%
  • Medium6342%
  • Low32%

Latest CVEs

The 15 most recently published vulnerabilities affecting Core.

  1. CVE-2026-108725Cheshire Cat AI core through 2.0.23 Stored XSS via uploads plugin5.4
  2. CVE-2026-103922Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path9.3
  3. CVE-2026-102107Kiteworks Core user impersonation in a file-request feature4.6
  4. CVE-2026-102110Missing authentication on a Kiteworks appliance setup function5.9
  5. CVE-2026-102111Kiteworks Core Improper Validation of Specified Quantity in Input4.9
  6. CVE-2026-102112Kiteworks Core Local Privilege Escalation7.8
  7. CVE-2026-102113Kiteworks Core Local Privilege Escalation7.8
  8. CVE-2026-102114Kiteworks Core OS Command Injection7.2
  9. CVE-2026-102115Kiteworks Core Authentication Bypass in the Password Reset Workflow9.8
  10. CVE-2026-102117Kiteworks Core Remote Code Execution7.2
  11. CVE-2026-102118Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation7.8
  12. CVE-2026-102120Kiteworks Core OS Command Injection8.8
  13. CVE-2026-102122Kiteworks Core Incorrect Authorization4.3
  14. CVE-2026-102123Kiteworks Core Path Traversal7.4
  15. CVE-2026-102124Kiteworks Core Missing Authentication for Critical Function6.5

Product grouping is registry-driven, with AI assist and human review. How it works