CVE-2026-57311General

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Windu CMS does not validate types of uploaded files. An authenticated attacker can upload arbitrary files, including PHP. This can lead to Remote Code Execution. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 4.1 but may also affect other versions.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

General: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://vuldb.com/vuln/380582/cti

Full discourse1 post

VulDB 🛡@vuldb92d
General
It is possible to see elevated activities targeting JCD Windu CMS (CVE-2026-57311) https://vuldb.com/vuln/380582/cti
Post summary
The text notes potential elevated activity targeting CVE-2026-57311 in JCD Windu CMS but offers no detail on the vulnerability, exploit, or remediation.
0000096
2.3K followersView on X

Explore more

Back to dashboard