References https://avd.aliyun.com/detail?id=AVD-2026-25133 https://cve.imfht.com/detail/CVE-2026-26274 https://avd.aliyun.com/detail?id=AVD-2026-22692 https://www.nsfocus.net/vulndb/59690 https://www.knowsafe.com/ti/info/0/1004625 https://avd.aliyun.com/detail?id=AVD-2026-24906 https://zone.ci/vulns/ys/347848.html https://www.cnvd.org.cn/flaw/show/CNVD-2020-43155 https://cve.imfht.com/poc_detail/a6f825305da8259da26aab6ad65f27b7b5a45d73?lang=en https://avd.aliyun.com/detail?id=AVD-2023-25365 https://cyllective.com/blog/posts/cve-2022-21705/ https://github.com/advisories/GHSA-h76r-vgf3-j6w5 https://pentest-tools.com/vulnerabilities-exploits/october-cms-remote-code-execution_1584 https://www.exploit-db.com/exploits/51630 https://nvd.nist.gov/vuln/detail/CVE-2022-21705 https://github.com/octobercms/october/security https://app.opencve.io/cve/?product=october&vendor=octobercms
Related VulnerabilitiesPoCCVE-2022-21705: October CMS - Remote Code ExecutionPoCCVE-2021-32648: OctoberCMS - Account TakeoverPoCoctobercms-default-login: OctoberCMS - Default Admin DiscoveryOctobercms远程代码执行漏洞