Concrete CMS is vulnerable to IDOR in surveys
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8337 · GHSA-8c7c-h7px-267g
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
6026–6050 of 30,985 matching · newest first
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8337 · GHSA-8c7c-h7px-267g
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8427 · GHSA-67hj-8239-cmf5
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8410 · GHSA-v7c7-658v-hh7v
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8409 · GHSA-56c9-xq5g-xrf9
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8416 · GHSA-qj94-6rx6-27fr
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8412 · GHSA-rv3q-xmfw-mcjv
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8432 · GHSA-97jw-gr4m-c5v8
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8411 · GHSA-752x-23hp-jmv6
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8245 · GHSA-f73j-pm2c-rxvr
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8433 · GHSA-6fxm-r8p3-mx5c
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8434 · GHSA-6qjh-p324-694f
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8413 · GHSA-mpq2-mv8p-9wm6
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8415 · GHSA-xj25-753j-wgp9
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8435 · GHSA-44q4-354f-c826
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · >= 9.0.0RC1, < 9.5.1 · CVE-2026-8414 · GHSA-98qf-jvwj-2r5f
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-7890 · GHSA-gjwq-9v8p-47w7
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8239 · GHSA-2xp7-rpvc-pjwc
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8327 · GHSA-wmw3-3fv3-h54w
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8139 · GHSA-pcrh-gj77-j4mw
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8236 · GHSA-58c8-vvqw-cm7m
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-7879 · GHSA-fqg3-8w8r-8g94
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-7886 · GHSA-p8p9-5953-h9jw
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-8237 · GHSA-xpgc-7vc2-8725
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-7881 · GHSA-chfm-cm6h-q5x7
Packagist concrete5/concrete5 · Upgrade to 9.5.1 or later · < 9.5.1 · CVE-2026-7887 · GHSA-f54h-78c9-c24h
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.