CVE-2026-29909 in MRCMS
Résumé (Anglaise)
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials.
Responsable
MITRE
Réserver
04/03/2026
Divulgation
30/03/2026
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354213 | MRCMS File Management list.do divulgation d'information | 200 | Non défini | Non défini | CVE-2026-29909 |