Slah Informatica CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Slah Informatica CVE published 2026-04-15

CVE-2026-30993

A critical vulnerability was discovered in Slah CMS v1.5.0 and below, allowing for remote code execution (RCE) via a crafted input in the session() function at config.php. This issue is exploitable and has a CVSS score of 9.8. The vulnerability affects Slah CMS deployments, which defenders and administrators should assess for exposure and apply necessary patches or mitigations to prevent potential remote [truncated]