CVE-2026-87930 | MaxSite CMS up to 109.6 unserialize ci_session deserialization

September 9, 2026 Yanac

A vulnerability classified as critical has been found in MaxSite CMS up to 109.6. Affected by this vulnerability is the function unserialize. Performing a manipulation of the argument ci_session results in deserialization. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is identified as CVE-2026-87930. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More