CVE-2025-51511: Cadmium-CMS Cadmium CMS

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.

Affected products

• Cadmium-CMS Cadmium CMS: version 0.4.9 only

Published 2025-12-23. Last modified 2026-06-17.