CVE-2026-126774 | TinaCMS up to 2.4.1 MDX Serializer code injection

November 11, 2026 Yanac

A vulnerability was found in TinaCMS up to 2.4.1. It has been rated as critical. This issue affects some unknown processing of the component MDX Serializer. This manipulation causes code injection.

This vulnerability is tracked as CVE-2026-126774. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More