Craft CMS security advisory (AV26-1086)

As cited

Copy frozen at 2026-10-26 18:23 UTC (site build).

vulnerabilities

Craft CMS security advisory (AV26-1086)

Craft CMS issued a security advisory (AV26-1086) on October 26, 2026, addressing vulnerabilities in Craft CMS versions prior to 4.18.9 and 5.11.2, as well as the Commerce-mollie plugin prior to 4.4.3. The Cyber Centre recommends users and administrators apply the available updates.

Why it matters: Organizations running affected Craft CMS or Commerce-mollie versions should prioritize patching to prevent exploitation of these vulnerabilities.

Source published

2026-10-26 15:48 UTC

First seen by Cybersecurity Tracker

2026-10-26 17:36 UTC