Threat actors exploited Craft CMS zero-days CVE-2025-32432 and CVE-2024-58136, compromising 300 of 13,000 vulnerable servers.

With large community of volunteer contributors, they develop free and open source software to extend the life of consumer ...