PT-2026-20494 · Unknown · Mingsoft Mcms

Unnlucky1 · Published 2026-02-18 · Updated 2026-02-19 · CVE-2026-2666

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mingSoft MCMS version 6.1.1

Description A flaw exists in mingSoft MCMS 6.1.1 related to unrestricted file upload. The issue is located within the Template Archive Handler component, specifically in a function associated with the /ms/file/uploadTemplate.do file. Manipulation of the File argument allows for unrestricted file uploads, and the attack can be initiated remotely. The exploit has been published.

Recommendations Apply any available updates or patches for mingSoft MCMS version 6.1.1. As a temporary workaround, restrict access to the /ms/file/uploadTemplate.do endpoint.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2026-2666

GHSA-R9WP-QQ53-QVJX

Affected Products

Mingsoft Mcms

References · 13

• 🔥 https://github.com/chujianxin0101/vuln/issues/11 · Exploit
• 🔥 https://github.com/chujianxin0101/vuln/issues/11#issue-3905144613 · Exploit
• https://osv.dev/vulnerability/CVE-2026-2666 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r9wp-qq53-qvjx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2666 · Security Note
• https://github.com/ming-soft/MCMS · Note
• https://twitter.com/RedPacketSec/status/2024576490239557642 · Twitter Post
• https://vuldb.com/?submit.753243 · Note
• https://twitter.com/CVEnew/status/2024233244325990451 · Twitter Post
• https://vuldb.com/?id.346463 · Note
• https://vuldb.com/?ctiid.346463 · Note
• https://t.me/cveNotify/152496 · Telegram Post
• https://t.me/CVEtracker/45018 · Telegram Post