Known vulnerabilities in Pimcore Studio Backend bundle

Vendor: Pimcore
Software: Pimcore Studio Backend bundle
Software CPE: cpe:2.3:a:pimcore:studio-backend-bundle:*:*:*:*:*:pimcore:*:*
Website: https://pimcore.com/en
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Pimcore Studio Backend bundle Pimcore Studio Backend bundle is affected by 3 known vulnerabilities: 1 high, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135786 - Weak password recovery mechanism
CVE-2026-55207		 CWE-640 High
No
No
 2025.4.6, 2026.1.6 29.06.2026 SB2026062994
#VU135785 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-55208		 CWE-89 Low
No
No
 2025.4.6, 2026.1.6 29.06.2026 SB2026062994
#VU135784 - Improper Authorization
CVE-2026-55212		 CWE-285 Low
No
No
 2025.4.6, 2026.1.6 29.06.2026 SB2026062994