Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, a Server-Side Request Forgery (SSRF) issue exists in the external page migration feature of the Page Management Plugin. Versions 1.41.1 and 2.41.1 contain a patch.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32279 Server-Side Request Forgery in Connect-CMS Page Management Plugin Before 1.41.1 and 2.41.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32279
Post summary
A brief reference to a SSRF vulnerability in Connect-CMS Page Management Plugin, with minimal technical details and no evidence of PoC, exploit, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opensource-workshop | connect-cms | - | - | - |