PatchTheCVEinstantcms vulnerabilities
Recent CVEs affecting instantcms products. 4 tracked.
instantcms has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-10. Highest priority: CVE-2013-10051 (score 69/100).
- CVE-2026-28281 HIGH 7.1 UPGRADE InstantCMS is a free and open source content management system
- CVE-2025-59055 MEDIUM 4.7 UPGRADE InstantCMS is a free and open source content management system
- CVE-2024-50348 MEDIUM 5.4 UPGRADE InstantCMS is a free and open source content management system
- CVE-2013-10051 CRITICAL 9.8 UPGRADE A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of ev
FAQ
How do I fix instantcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is instantcms being exploited right now?
None of the tracked instantcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which instantcms CVE should I patch first?
CVE-2013-10051 currently ranks highest (69/100): A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of ev.