CVE-2022-26265: Contao

Critical severity, CVSS 9.8. EPSS: 30.4% chance of exploitation in the next 30 days.

Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.

Affected products

• Contao Contao: version 1.5.0 only

Published 2022-03-18. Last modified 2026-06-17.