Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-05 | 2 | Disclosure2 |
| 2026-02-06 | 1 | Disclosure1 |
CVE-2025-70073 An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function https://www.cve.org/CVERecord?id=CVE-2025-70073
Post summary
CVE‑2025‑70073 is a remote code execution flaw in ChestnutCMS v1.5.8 and earlier, triggered through the template creation function. No PoC, exploit, patch, or active exploitation is reported.
🔴 CVE-2025-70073 - Critical An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function https://www.thehackerwire.com/vulnerability/CVE-2025-70073/ https://t.co/2VrUtRm2by
Post summary
The post announces CVE-2025-70073, a critical remote code execution flaw in ChestnutCMS via template creation, with no evidence of exploitation, PoC, or patching yet.
CVE-2025-70073 Remote Code Execution in ChestnutCMS v1.5.8 via Template ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70073 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
CVE‑2025‑70073 is disclosed as a Remote Code Execution vulnerability affecting ChestnutCMS v1.5.8, with no PoC, exploit, or patch information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | 1000mz | chestnutcms | - | - | - |