CVE-2021-46386: Mingsoft Mcms

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.

Affected products

• Mingsoft Mcms: up to and including 5.2.5

Published 2022-01-26. Last modified 2026-06-17.