CVE-2026-19356

Name of the Vulnerable Software and Affected Versions MingSoft MCMS versions prior to 3.0.7

Description A remote information disclosure issue exists within the ms-mdiy component. The flaw is located in an unknown function of the '/mdiy/form/data/list' endpoint, allowing a remote attacker to manipulate the system to disclose sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/mdiy/form/data/list' endpoint to minimize the risk of exploitation.