PT-2026-20494 · Unknown · Mingsoft Mcms

Unnlucky1 · Publicado 2026-02-18 · Atualizado 2026-02-19 · CVE-2026-2666

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mingSoft MCMS version 6.1.1

Description A flaw exists in mingSoft MCMS 6.1.1 related to unrestricted file upload. The issue is located within the Template Archive Handler component, specifically in a function associated with the /ms/file/uploadTemplate.do file. Manipulation of the File argument allows for unrestricted file uploads, and the attack can be initiated remotely. The exploit has been published.

Recommendations Apply any available updates or patches for mingSoft MCMS version 6.1.1. As a temporary workaround, restrict access to the /ms/file/uploadTemplate.do endpoint.

Exploit

Correção

Improper Access Control

Unrestricted File Upload

Enumeração de Fraquezas

CWE-284

CWE-434

Identificadores relacionados

CVE-2026-2666

GHSA-R9WP-QQ53-QVJX

Produtos afetados

Mingsoft Mcms

Referências · 13

• 🔥 https://github.com/chujianxin0101/vuln/issues/11 · Exploit
• 🔥 https://github.com/chujianxin0101/vuln/issues/11#issue-3905144613 · Exploit
• https://github.com/ming-soft/MCMS · Nota
• https://osv.dev/vulnerability/CVE-2026-2666 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-r9wp-qq53-qvjx · Aviso do Fabricante
• https://twitter.com/RedPacketSec/status/2024576490239557642 · Publicação no Twitter
• https://vuldb.com/?submit.753243 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2666 · Nota de Segurança
• https://twitter.com/CVEnew/status/2024233244325990451 · Publicação no Twitter
• https://vuldb.com/?id.346463 · Nota
• https://vuldb.com/?ctiid.346463 · Nota
• https://t.me/cveNotify/152496 · Publicação no Telegram
• https://t.me/CVEtracker/45018 · Publicação no Telegram