CVE-2017-14050: Blackcat-CMS Blackcat CMS

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file.

Affected products

• Blackcat-CMS Blackcat CMS: version 1.2 only

Published 2017-08-31. Last modified 2026-06-17.