CVE-2026-111686 | cosy IceCMS up to 4.1.5 findarticlesbynum sql injection

October 16, 2026 Yanac

A vulnerability labeled as critical has been found in cosy IceCMS up to 4.1.5. This impacts an unknown function of the file /WebArticle/findarticlesbynum. The manipulation of the argument num results in sql injection.

This vulnerability is reported as CVE-2026-111686. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More