CVEs published by dotCMS LLC

CVEs published by dotCMS LLC (CVE Numbering Authority). 2 tracked.

• CVE-2026-8054 CRITICAL 10.0 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API
• CVE-2026-16337 CRITICAL 9.4 Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through

← Back to latest CVEs