64 CVEs affecting October CMS products, 1 known to be exploited (CISA KEV), with EPSS scores. Most affected: October, Debugbar, System.