Thecosy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Thecosy CVE published 2026-10-16

CVE-2026-111686

CVE-2026-111686 is a SQL injection vulnerability in IceCMS through version 4.1.5, allowing remote attackers to inject SQL via the num path parameter of /WebArticle/findarticlesbynum. This vulnerability has a CVSS score of 8.7 and is considered HIGH severity. The vulnerability exists in the /WebArticle/findarticlesbynum endpoint, allowing attackers to potentially extract database contents via union-based o [truncated]