PT-2026-22161 · Fastcms · Fastcms

CVE-2026-26682

Published

2026-02-26

Updated

2026-03-03

CVSS v3.1

7.8

High

Vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions fastCMS versions prior to 0.1.6

Description An issue exists in fastCMS that allows a local attacker to execute arbitrary code via the PluginController.java component.

Recommendations Update to version 0.1.6 or later.

Exploit

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-26682

Fastcms