Threats tagged 'ghsa-mr8h-hjph-4g54'

CVE-2026-19357 is an information disclosure vulnerability in MingSoft MCMS versions 3.0.0 through 3.0.6. The flaw exists in an unknown function within the /mdiy/form/get file of the ms-mdiy component. The vulnerability can be exploited remotely without authentication and has a publicly available exploit. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available.