{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.1.1"}],"component":"net.mingsoft:ms-mcms","cve_ids":["CVE-2026-2666"],"ecosystem":"Maven","epss":0.00411,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r9wp-qq53-qvjx","id":"tcs_01M5N9BE9SXNERC1QYMZ9D3DRF","modified_at":"2026-02-22T23:41:19.622561Z","published_at":"2026-02-18T21:31:23Z","references":["https://osv.dev/vulnerability/GHSA-r9wp-qq53-qvjx","https://nvd.nist.gov/vuln/detail/CVE-2026-2666","https://github.com/chujianxin0101/vuln/issues/11","https://github.com/ming-soft/MCMS","https://vuldb.com/?ctiid.346463","https://vuldb.com/?id.346463","https://vuldb.com/?submit.753243"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-r9wp-qq53-qvjx","url":"https://osv.dev/vulnerability/GHSA-r9wp-qq53-qvjx"}],"summary":"mingSoft MCMS does not properly restrict file uploads"}