PatchTheCVEqianfox vulnerabilities
Recent CVEs affecting qianfox products. 7 tracked.
qianfox has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-10-05. Highest priority: CVE-2025-7568 (score 37/100).
- CVE-2025-11306 MEDIUM 4.3 UPGRADE A vulnerability was found in qianfox FoxCMS up to 1.2
- CVE-2025-7568 MEDIUM 6.3 UPGRADE A vulnerability was found in qianfox FoxCMS up to 1.2.5
- CVE-2025-6094 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5
- CVE-2025-51650 MEDIUM 5.6 UPGRADE An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2.6 allows att
- CVE-2025-2653 MEDIUM 4.3 DOWNGRADE A vulnerability was found in FoxCMS 1.25 and classified as problematic
- CVE-2024-12901 MEDIUM 5.3 UPGRADE A vulnerability classified as critical was found in FoxCMS up to 1.2
- CVE-2024-12900 MEDIUM 6.3 UPGRADE A vulnerability classified as critical has been found in FoxCMS up to 1.2
FAQ
How do I fix qianfox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qianfox being exploited right now?
None of the tracked qianfox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qianfox CVE should I patch first?
CVE-2025-7568 currently ranks highest (37/100): A vulnerability was found in qianfox FoxCMS up to 1.2.5.