Hubzero Hubzero-Cms
2 CVEs affecting Hubzero Hubzero-Cms. Latest disclosed: 2026-09-17. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92970 | High | 8.8 | 2026-09-17 | HUBzero CMS through 2.2.32 contains a path traversal vulnerability in project file upload handlers that allows authenticated project members to write arbitrary… |
CVE-2026-92984 | High | 8.1 | 2026-09-17 | HUBzero CMS through 2.2.32 accepts session identifiers from query strings and request variables instead of cookies alone, allowing unauthenticated attackers to… |