CVE Tools
Track your stack

October/system

18 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for October/system, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

October/system CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
October/system CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-051
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-012
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 18 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical16%
  • High741%
  • Medium741%
  • Low212%

Latest CVEs

The 15 most recently published vulnerabilities affecting October/system.

  1. CVE-2025-61674October CMS Vulnerable to Stored XSS via Editor and Branding Styles6.1
  2. CVE-2025-61676October CMS Vulnerable to Stored XSS via Branding Styles6.1
  3. CVE-2024-51991October CMS Allows Unprotected SVG Rename in Media Manager4.9
  4. CVE-2024-25637Reflected XSS via X-October-Request-Handler Header3.1
  5. CVE-2024-24764October Open Redirect for Administrator Accounts3.5
  6. CVE-2023-44381October CMS safe mode bypass using Page template injection4.9
  7. CVE-2023-44382October CMS safe mode bypass using Twig sandbox escape9.1
  8. CVE-2023-44383October CMS stored XSS by authenticated backend user with improper configuration5.4
  9. CVE-2022-35944October CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution)6.2
  10. CVE-2022-24800Race Condition in October CMS upload process8.1
  11. CVE-2022-23655Missing server signature validation in OctoberCMS4.8
  12. CVE-2022-21705Authenticated remote code execution in octobercms7.2
  13. CVE-2021-32649Authenticated file write leads to remote code execution in october/system8.8
  14. CVE-2021-32650Arbitrary code execution in october/system8.8
  15. CVE-2021-41126Deleted Admin Can Sign In to Admin Interface7.2

Product grouping is registry-driven, with AI assist and human review. How it works