Kunstmaan Media-bundle vulnerabilities

• kunstmaan bundles-cms, kunstmaanbundlescms, media-bundle +2 more Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution CVE-2026-104890 Fix available 7.2 HighOctober 5, 2026