En resumen
- CVE-2026-2666 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a net.mingsoft:ms-mcms, mcms (mingsoft).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.41%, mayor que el 35.4% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
NVD description
A flaw has been found in mingSoft MCMS 6.1.1. The affected element is an unknown function of the file /ms/file/uploadTemplate.do of the component Template Archive Handler. Executing a manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.
Más vulnerabilidades de net.mingsoft:ms-mcms
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free