connect-cms

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Connect-CMS has Arbitrary Code Execution by an Authenticated User in its Code Study PluginCVE-2026-32276opensource-workshop · CVSS 8.8 · 0.5% likely

   CWE-94

2. Connect CMS has SSRF in the External Page Migration Feature of its Page Management PluginCVE-2026-32279opensource-workshop · CVSS 6.8 · 0.4% likely

   CWE-918

3. Connect-CMS has DOM-based Cross-Site Scripting (XSS) in the Cabinet Plugin List ViewCVE-2026-32277opensource-workshop · CVSS 8.7 · 0.3% likely

   CWE-79

4. Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User InformationCVE-2026-32300opensource-workshop · CVSS 8.1 · 0.3% likely

   CWE-639

5. Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval FeatureCVE-2026-32299opensource-workshop · CVSS 7.5 · 0.3% likely

   CWE-284

6. Connect CMS has Stored Cross-site Scripting (XSS) in the File Field of its Form PluginCVE-2026-32278opensource-workshop · CVSS 8.2 · 0.2% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.