CVE-2026-25494 Overview Field Details Software Craft CMS Vendor Craft CVE ID CVE-2026-25494 Severity Medium CVSS Score 6.5 Vulnerable Versions < 4.16.18, < 5.8.22 Patched Version 5.8.22 References NIST NVD Entry Patch / Fix PoC / Exploit