Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-29909 - MRCMS Directory Enumeration Vulnerability Intel Report: https://ift.tt/v9n0VhU
Post summary
The alert announces CVE-2026-29909 as a directory enumeration vulnerability in MRCMS, linking to an Intel report, but provides no PoC, exploit code, patch details, or evidence of ongoing attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mrcms | mrcms | 3.1.2 | - | - |