o
october
Security Risk Profile
32
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 14, 2026 to present
5
Total CVEs
0
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
4.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
32/100
low
Severity Distribution
Critical
0High
0Medium
3Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
Path Traversal
1
3
Infoleak
1
Most Affected Products
1. composer/october/system6
2. October October CMS5
3. composer/october/october2
4. composer/october/rain2
5. Octobercms October2
Recent Vulnerabilities
See more →CVE-2026-29179
CVSS 3.3low
October: Editor Sub-Permission Bypass for Asset and Blueprint File Operations
Apr 21, 2026
CVE-2026-27937
CVSS 3.1low
October: Reflected XSS via DataTable Form Widget
Apr 21, 2026
CVE-2026-26274
CVSS 6.6medium
October: Safe Mode Bypass via Twig Database Write Operations
Apr 21, 2026
CVE-2026-26067
CVSS 4.9medium
October: Safe Mode Bypass via CSS Preprocessor Compilers
Apr 21, 2026
CVE-2026-25133
CVSS 4.8medium
October CMS has Stored XSS via SVG Filter Bypass
Apr 14, 2026
Monitor october in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.