[CRITICAL] Mautic has Server-Side Template Injection (SSTI) in Theme Templates

PKSA-5wpq-7gbm-cqxv CVE-2026-9558 GHSA-9fx4-7cmj-47vg

Affected version: >=7.0.0,<7.1.2|>=6.0.0,<6.0.9|>=5.0.0,<5.2.11|>=1.3.0,<4.4.13

Reported by:
GitHub

[MEDIUM] Mautic Focus component Vulnerable to SSRF

PKSA-tmx3-5zmv-624c CVE-2026-9557 GHSA-jmv8-8j9j-rcpc

Affected version: >=7.0.0,<7.1.2|>=6.0.0,<6.0.9|>=5.0.0,<5.2.11|>=4.0.0,<=4.4.13

Reported by:
GitHub

[HIGH] Mautic has SQL Injection in API Contact Filtering

PKSA-pdn1-217f-vc3y CVE-2026-4776 GHSA-fcmw-wx57-9p75

Affected version: >=7.0.0,<7.1.2|>=6.0.0,<6.0.9|>=5.0.0,<5.2.11|>=2.6.0,<=4.4.13

Reported by:
GitHub

[HIGH] Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting

PKSA-frhs-vjy5-hffg CVE-2026-3105 GHSA-r5j5-q42h-fc93

Affected version: >=7.0.0-alpha,<7.0.1|>=6.0.0-alpha,<6.0.8|>=2.10.0,<5.2.10

Reported by:
GitHub

[CRITICAL] Mautic user without privileged access to the Marketplace can install and uninstall composer packages

PKSA-j693-8gvk-sx7v CVE-2025-13828 GHSA-3fq7-c5m8-g86x

Affected version: >=6.0.0,<6.0.7|>=5.0.0,<5.2.9|>=4.0.0,<4.4.18

Reported by:
GitHub

[MEDIUM] Mautic Vulnerable to User Enumeration via Response Timing

PKSA-f1xn-2dhr-qrdb CVE-2025-9824 GHSA-3ggv-qwcp-j6xg

Affected version: >=6.0.0-alpha,<6.0.5|>=5.0.0-alpha,<5.2.8|>=4.4.0,<4.4.17

Reported by:
GitHub

[MEDIUM] Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add

PKSA-vhyd-4d5p-sjmg CVE-2025-9823 GHSA-9v8p-m85m-f7mm

Affected version: >=6.0.0-alpha,<6.0.5|>=5.0.0-alpha,<5.2.8|>=4.4.0,<4.4.17

Reported by:
GitHub

[MEDIUM] Mautic vulnerable to secret data extraction via elfinder

PKSA-bn7t-4gr8-g6ns CVE-2025-9822 GHSA-438m-6mhw-hq5w

Affected version: >=6.0.0-alpha,<6.0.5|>=5.0.0-alpha,<5.2.8|>=4.4.0,<4.4.17

Reported by:
GitHub

[LOW] Mautic vulnerable to SSRF via webhook function

PKSA-1vkq-hh1n-xfrh CVE-2025-9821 GHSA-hj6f-7hp7-xg69

Affected version: >=6.0.0-alpha,<6.0.5|>=5.0.0-alpha,<5.2.8|>=4.4.0,<4.4.17

Reported by:
GitHub