masacms vulnerabilities and fixes

Recent CVEs affecting masacms, with upgrade or downgrade steps. 4 tracked.

masacms has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-12-12. Highest priority: CVE-2024-32641 (score 71/100).

• CVE-2025-66492 HIGH 8.2 UPGRADE Masa CMS is an open source Enterprise Content Management platform
• CVE-2024-32641 CRITICAL 9.8 UPGRADE Masa CMS is an open source Enterprise Content Management platform
• CVE-2024-32643 HIGH 7.5 UPGRADE Masa CMS is an open source Enterprise Content Management platform
• CVE-2024-32642 HIGH 8.8 UPGRADE Masa CMS is an open source Enterprise Content Management platform

FAQ

How do I fix masacms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is masacms being exploited right now?

None of the tracked masacms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which masacms CVE should I patch first?

CVE-2024-32641 currently ranks highest (71/100): Masa CMS is an open source Enterprise Content Management platform.

RSS feed for masacms · ← Back to latest CVEs