Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Kunstmaan
Bundles-cms
Kunstmaan Bundles-cms vulnerabilities
kunstmaan
bundles-cms
,
kunstmaanbundlescms
,
media-bundle
+2 more
Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution
CVE-2026-104890
Fix available
7.2
High
October 5, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open