Back to today’s briefing

Story perspectives

Urgent Update: Craft CMS Faces Serious Cyber Threats

4/29/2025

50 6

Summary

Story summary

Cybercriminals are targeting Craft CMS with two serious vulnerabilities, CVE-2025-32432 and CVE-2024-58136, allowing them to execute remote code and bypass security measures. With over 13,000 affected servers worldwide, administrators must act swiftly—updating Craft CMS, refreshing security keys, and rotating credentials to safeguard sensitive data.

1 of 1

Story summary

Cybercriminals are targeting Craft CMS with two serious vulnerabilities, CVE-2025-32432 and CVE-2024-58136, allowing them to execute remote code and bypass security measures. With over 13,000 affected servers worldwide, administrators must act swiftly—updating Craft CMS, refreshing security keys, and rotating credentials to safeguard sensitive data.