Mautic
55 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Mautic, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
Mautic CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 3 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 5 |
| 2025-06 | 0 |
| 2025-07 | 1 |
| 2025-08 | 0 |
| 2025-09 | 4 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 2 |
| 2026-01 | 0 |
| 2026-02 | 1 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 55 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical7
- High17
- Medium25
- Low3
Latest CVEs
The 15 most recently published vulnerabilities affecting Mautic.
- CVE-2026-3105SQL Injection in Contact Activity API Sorting7.6
- CVE-2025-13828Mautic user without privileged access to the Marketplace can install and uninstall composer packages—
- CVE-2025-13827GrapesJsBuilder File Upload allows all file uploads—
- CVE-2025-9823Reflected XSS in lead:addLeadTags - Quick Add—
- CVE-2025-9824User Enumeration via Response Timing5.9
- CVE-2025-9822Secret data extraction via elfinder5.5
- CVE-2025-9821SSRF via webhook function2.7
- CVE-2025-7381Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images5.3
- CVE-2025-5256Open Redirect vulnerability on user unlock path5.4
- CVE-2024-47055Segment cloning doesn't have a proper permission check4.3
- CVE-2024-47057User name enumeration possible due to response time difference on password reset form5.3
- CVE-2024-47056Mautic does not shield .env files from web traffic5.1
- CVE-2025-5257Predictable Page Indexing Might Lead to Sensitive Data Exposure6.5
- CVE-2024-47051Remote Code Execution & File Deletion in Asset Uploads9.1
- CVE-2024-47053Improper Authorization in Reporting API7.7
Product grouping is registry-driven, with AI assist and human review. How it works