Mmastodon TechnologyCybersecurity first seen 27 d ago, last 27 d ago, peak #12

IceCMS hit by high-severity unauthenticated SQL injection flaw

Original: 🟠 CVE-2026-111686 - High (7.5) IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows

A high-severity vulnerability, tracked as CVE-2026-111686 with a CVSS score of 7.5, has been disclosed in IceCMS through version 4.1.5. The flaw is an unauthenticated SQL injection in the num path parameter of the /WebArticle/findarticlesbynum endpoint, letting remote attackers append crafted SQL after the LIMIT clause and potentially access or manipulate database content.

Why now: Newly disclosed SQL injection vulnerabilities in widely used CMS software prompt administrators to patch and assess exposure.

IceCMSCVE-2026-111686

Open on mastodon →

Evidence

• 🟠 CVE-2026-111686 - High (7.5) IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/2700041