ImpressCMS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH ImpressCMS CVE published 2026-08-14

CVE-2026-73679

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-14T19:18:01.610Z and has not been modified since then. ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The ap [truncated]