PT-2026-39514 · Unknown · Evolution Cms

Halit Akaydin · Published 2026-05-10 · Updated 2026-05-10 · CVE-2021-47939

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Evolution CMS version 3.1.6

Description Authenticated users with module creation permissions can execute arbitrary system commands by injecting PHP code into module parameters. This is achieved by sending POST requests to the "/manager/index.php" endpoint with malicious PHP code within the post parameter to create modules that execute commands when invoked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2021-47939

Affected Products

Evolution Cms

References · 6

• 🔥 https://exploit-db.com/exploits/50296 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47939 · Security Note
• https://github.com/evolution-cms/evolution/releases · Note
• https://twitter.com/CVEnew/status/2053537426279424385 · Twitter Post
• https://vulncheck.com/advisories/evolution-cms-authenticated-remote-code-execution-via-module-creation · Note
• https://evo.im · Note