Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
kunstmaan/bundles-cms
kunstmaan/bundles-cms vulnerabilities (Packagist)
1 vulnerability.
kunstmaan/bundles-cms
Packagist
Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution
CVE-2026-104890
Fix available
7.2
High
October 5, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open