PatchSiren

WMCMS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW WMCMS CVE published 2026-10-12

CVE-2026-108811

A weakness has been identified in WMCMS 4.446.1257, specifically in the /index.php file, which allows for information disclosure when the path/file argument is manipulated. This vulnerability can be exploited remotely. The CVE record was published on 2026-10-12T07:15:18.816Z and has not been modified since then. Defenders should assess exposure and prioritize verification and potential mitigation. The aff [truncated]