mingsoft
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 52 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 23, 2018 to present
52
Total CVEs
42
Critical+High
0
Exploited
39
Unpatched
Threat Assessment
Avg CVSS
8.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
39
Critical/High
Risk Level
38/100
low
🆕 3Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
28High
14Medium
10Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
20
2
Malicious File Upload
13
3
XSS
4
4
CSRF
3
5
Infoleak
2
Most Affected Products
1. Mingsoft MCMS55
2. maven/net.mingsoft:ms-mcms12
3. Mcms MCMS4
4. Mingsoft MingSoft MCMS1
5. Mcms ueditor1
Recent Vulnerabilities
See more →CVE-2026-19357
CVSS 5.5medium
MingSoft MCMS ms-mdiy get information disclosure
8/9/2026🔧 No Patch
CVE-2026-19356
CVSS 5.5medium
MingSoft MCMS ms-mdiy list information disclosure
8/9/2026🔧 No Patch
CVE-2026-19355
CVSS 5.5medium
MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection
8/9/2026🔧 No Patch
CVE-2026-4954
CVSS 5.3EPSS 0%medium
mingSoft MCMS Web Content List Endpoint ContentAction.java list sql injection
3/27/2026🔧 No Patch
CVE-2026-4953
CVSS 6.9EPSS 0%medium
mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery
3/27/2026🔧 No Patch
CVE-2026-2666
CVSS 7.2EPSS 0%high
mingSoft MCMS Template Archive uploadTemplate.do unrestricted upload
2/18/2026🔧 No Patch
CVE-2025-60837
CVSS 6.1medium
10/23/2025🔧 No Patch
CVE-2025-56316
CVSS 9.8critical
10/17/2025
CVE-2025-60838
CVSS 6.5medium
10/10/2025🔧 No Patch
CVE-2025-29287
CVSS 9.8critical
4/21/2025
Monitor mingsoft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.