+ Request intel workspace

CVE

CVE-2025-35939

P2

Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

Craft CMS · Craft CMS

Date added (CISA)

2025-06-02

Remediation due

2025-06-23

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Related

Nothing linked yet

No threat actor or pipeline report has been cross-referenced against this CVE yet.

Source: NVD ↗ · CISA KEV Catalog ↗

CVE-2025-35939: Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability · RaqibCTI