CVEs published by Mautic

CVEs published by Mautic (CVE Numbering Authority). 9 tracked.

CVE-2026-115196 MEDIUM 5.4 An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic
CVE-2026-115195 MEDIUM 6.5 A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table})
CVE-2026-115194 MEDIUM 6.5 A path traversal vulnerability exists in the Mautic Asset API
CVE-2026-115193 HIGH 8.2 A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7
CVE-2026-115192 HIGH 7.1 An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type})
CVE-2026-115191 HIGH 7.1 A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface
CVE-2026-115190 HIGH 8.0 An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filter
CVE-2026-115189 HIGH 8.8 A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic
CVE-2026-115188 CRITICAL 9.9 An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7