CVE-2026-105329 | TallCMS up to 4.8.0 PluginManager ThemeManager.php code injection (Issue 122)

October 5, 2026 Yanac

A vulnerability labeled as critical has been found in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component PluginManager. Executing a manipulation can lead to code injection.

This vulnerability is tracked as CVE-2026-105329. The attack can be launched remotely. Moreover, an exploit is present.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More