Skip to content
OpenAdvisories

Vendor

Kunstmaan

1 known vulnerabilities.

Products

KunstmaanBundlesCMS 1 bundles-cms 1 media-bundle 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-104890

    Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution

    Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php performs the blacklisted_extensions check case-sensitively in FileHandler::getFilePath and lowercas…

    Kunstmaan bundles-cms KunstmaanBundlesCMS media-bundle Packagist