mautic/core
16 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-115196 | 1.0.0-beta – < 5.2.12 ; 6.0.0 – < 6.0.10 ; 7.0.0 – < 7.2.2 | An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the applic | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-115195 | 2.3.0 – < 5.2.12 ; 6.0.0 – < 6.0.10 ; 7.0.0 – < 7.2.2 | A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for seve | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-115194 | 2.3.0 – < 5.2.12 ; 6.0.0 – < 6.0.10 ; 7.0.0 – < 7.2.2 | A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not re | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-115193 | 7.0.0 – < 7.2.2 | A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields a | HIGH 8.2 | 0.3 % | ||
| CVE-2026-115192 | 2.8.1 – < 5.2.12 ; 6.0.0 – < 6.0.10 ; 7.0.0 – < 7.2.2 | An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). Chart filter parameters supplied by the | HIGH 7.1 | 0.4 % | ||
| CVE-2026-115191 | 2.1.0 – < 5.2.12 ; 6.0.0 – < 6.0.10 ; 7.0.0 – < 7.2.2 | A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter | HIGH 7.1 | 0.4 % | ||
| CVE-2026-115190 | 2.15.2 – < 5.2.12 ; 6.0.0 – < 6.0.10 ; 7.0.0 – < 7.2.0 | An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties. | HIGH 8.0 | 0.5 % | ||
| CVE-2026-115189 | 1.3.0 – < 5.2.12 ; 6.0.0 – < 6.0.10 ; 7.0.0 – < 7.2.2 | A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introduced to restrict user | HIGH 8.8 | 0.6 % | ||
| CVE-2026-115188 | 7.0.0 – < 7.2.2 | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, t | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-9811 | 7.0.0 – < 7.1.2 | A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for a | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-9809 | 7.0.0 – < 7.1.2 | A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on | HIGH 7.6 | 0.2 % | ||
| CVE-2026-9808 | 7.0.0 – < 7.1.2 | An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles conf | HIGH 7.1 | 0.2 % | ||
| CVE-2026-9559 | 7.0.0 – < 7.1.2 | A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-9558 | 1.3.0 – < 4.4.20 ; 5.0.0 – < 5.2.11 ; 6.0.0 – < 6.0.9 ; … | A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-9557 | 4.0.0 – < 4.4.20 ; 5.0.0 – < 5.2.11 ; 6.0.0 – < 6.0.9 ; … | A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component. Due to insufficient validation of user-supplied URLs, | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-4776 | 2.6.0 – < 4.4.20 ; 5.0.0 – < 5.2.11 ; 6.0.0 – < 6.0.9 ; … | An SQL injection vulnerability exists in Mautic's API contact filtering mechanism. Due to insufficient recursive sanitization of nested quer | HIGH 7.1 | 0.2 % |