CVE-2026-19357: MingSoft MCMS ms-mdiy get information disclosure
A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form/get of the component ms-mdiy. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19357?
CVE-2026-19357 has a medium severity rating of 5.3.
What types of data are affected by CVE-2026-19357?
CVE-2026-19357 leads to information disclosure that could expose sensitive data.
How can I protect my system from CVE-2026-19357?
To mitigate CVE-2026-19357, it is recommended to update MingSoft MCMS to version 3.0.7 or later.
Can CVE-2026-19357 be exploited remotely?
Yes, CVE-2026-19357 can be exploited remotely, allowing attackers to access sensitive information.
What component of MingSoft MCMS is affected by CVE-2026-19357?
CVE-2026-19357 affects an unknown function in the ms-mdiy component of the MingSoft MCMS software.