CVE-2026-4954 in MCMS

Resumen (Inglés)

A security vulnerability has been detected in mingSoft MCMS 迄 5.5.0. Impacted is the function list of the file net/mingsoft/cms/action/web/ContentAction.java of the component Web Content List Endpoint. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Divulgación

2026-03-27

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
353832	mingSoft MCMS Web Content List ContentAction.java list inyección SQL	89	Prueba de concepto	No está definido	CVE-2026-4954

Fuentes

• MITRE
• NVD
• CVE Details