Picocms
1 CVE in 1 Picocms product, including Pico. Newest: CVE-2026-72574 (2026-08-10). Severity, EPSS and public exploits for each.
Picocms products with known CVEs
| Product | CVEs |
|---|---|
| Pico | 1 |
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72574 | Medium | 6.1 | 2026-08-10 | A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS asset… |