CVE-2026-2666
1 advisory.
Maven/net.mingsoft:ms-mcms CVE-2026-2666: medium 4.7
mingSoft MCMS does not properly restrict file uploads
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 6.1.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r9wp-qq53-qvjx
- https://nvd.nist.gov/vuln/detail/CVE-2026-2666
- https://github.com/chujianxin0101/vuln/issues/11
- https://github.com/ming-soft/MCMS
- https://vuldb.com/?ctiid.346463
- https://vuldb.com/?id.346463
- https://vuldb.com/?submit.753243
CVE-2026-2666 · published · modified · JSON