CyberSecBulletin

Mura Software vulnerabilities

We track 1 vulnerability in Mura Software products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.

1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score

Latest Mura Software vulnerabilities

  • 9.3 Critical severity

    CMS: Improper Control of Generation of Code

    CVE-2026-12257Mura Software

    Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vulnerability. The flaw is located in the endpoint “/index.cfm/_api/json/v1/default”, where the “method” parameter in POST requests is not properly validated or sanitised bef