contao has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 2.6 (low).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 2.6
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-200 1

Products

contao/contao 1

Follow contao:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-55824Low· 2.6Contao is an Open Source CMS14

contao vulnerabilities

CVEs affecting contao, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-55824Low· 2.6

Contao is an Open Source CMS

Contao is an Open Source CMS. In versions 4.13.40 through 5.3.46 and 5.7.0-RC1 through 5.7.6, the crawler leaks auth credentials to external hosts. Contao's crawler tries to prevent confidential HTTP client options from being sent to ext…

▾ Sunlitcontao · contao/contaoEPSS 0.15%via NVD

contao vulnerabilities (CVEs) · VulnSea