CVE-2026-26682
Local Code Execution via FastCMS PluginController
An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java component
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products