CMS vulnerabilities

1 known vulnerability in CMS from Mura Software. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  CMS: Improper Control of Generation of Code

  CVE-2026-12257Jul 13, 2026Mura Software

  Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vulnerability. The flaw is located in the endpoint “/index.cfm/_api/json/v1/default”, where the “method” parameter in POST requests is not properly validated or sanitised bef