CVE-2023-41892PoC(craftcms / craft_cms)

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

Patch craftcms craft_cms systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15.

craftcms CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Patch / fix

Other references

Weakness type (CWE)

CWE-94

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

craft_cms

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 2 signals
PoC mentioned or linked in 2 signals
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
General: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-08-24)
3 total mentions across 2 days

Affected systems

Vendors

craftcms

Products

craft_cms

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

PoC

133.3%

Exploit

133.3%

General

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-22	1	PoC1
2026-08-24	2	Exploit1General1

Full discourse3 posts

ExploitGrid@exploitgrid57d
General
🛡️ #ExploitGrid Daily #Threat Digest Critical Exploits disclosed today: CVE-2023-22527 CVE-2023-22518 CVE-2023-46604 CVE-2024-25600 CVE-2023-41892 ..🧵👇
Post summary
The post simply lists several CVE identifiers disclosed today without any additional details on exploitation, patches, or technical specifics.
1102042
38 followersView on X
dbugs@ptdbugs91d
PoC
A PoC/exploit has been discovered for vulnerability CVE-2025-32432 PT ID: PT-2025-17927 Vendor: craftcms Product: cms Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892. References: • https://dbugs.ptsecurity.com/vulnerability/PT-2025-17927 • https://github.com/c0gnit00/cve-2025-32432 #dbugs_vuln
Post summary
A proof‑of‑concept exploit for CVE-2025-32432 targeting CraftCMS was released, revealing a remote code execution vulnerability. The vulnerability is patched in specified releases, and detailed technical information is provided.
00020517
3.4K followersView on X
ExploitGrid@exploitgrid57d
Exploit
[EXPLOIT] EGE-CX-Fp0ARMZ [CRITICAL/PoC] Linked: CVE-2023-41892 Craft CMS 4.4.14 Remote Code Execution 🔗 https://exploitgrid.net/exploits/abd6fc71-29d7-4257-b624-c703293a4038
Post summary
The post discloses a critical CVE (CVE-2023-41892) affecting Craft CMS 4.4.14, presents a PoC and provides a link to exploit code, while no patches or active exploitation are noted.
1000027
38 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	craftcms	craft_cms	-	-	-

Explore more

Back to dashboard craftcms CVEs craft_cms vulnerabilities