VulnSocial

CVE-2026-62104Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Unauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8 versions.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-18); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-18: 2Mentions · 2026-09-21: 1Patch / Workaround · 2026-09-21: 1Technical Details · 2026-09-18: 1Technical Details · 2026-09-21: 109-1809-21
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-182
Disclosure1General1
2026-09-211
Disclosure1
Full discourse3 posts
  • ExploitGrid@exploitgrid
    Disclosure

    [CVE] CVE-2026-62104 [HIGH PRIORITY] #WordPress Migratico Lite plugin &lt;= 2.6.8 - Remote Code Execution (RCE) vulner... 🔗 https://exploitgrid.net/cve/CVE-2026-62104

    Post summary

    The text announces a high-priority Remote Code Execution (RCE) vulnerability in the WordPress Migratico Lite plugin versions 2.6.8 and below, providing a link to a CVE details page.

    1000056
    47 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-54734 CVE-2026-62104 CVE-2026-62874 CVE-2026-69399 CVE-2026-69843 ..🧵👇

    Post summary

    The text is a daily threat digest listing five CVE identifiers (CVE-2026-54734, CVE-2026-62104, CVE-2026-62874, CVE-2026-69399, CVE-2026-69843) without providing technical details, exploitation status, PoC availability, or patch information.

    1000062
    47 followersView on X
  • SecAlerts@SecAlertsCo
    Disclosure

    🔓 Unauthenticated RCE in WordPress Migratico Lite plugin (&lt;=2.6.8). No login needed, full code injection. CVSS 10. CVE-2026-62104 — update immediately if this is in your stack. #cybersecurity #wordpress #ciso #vulnerabilities #mssp https://secalerts.co/vulnerability/CVE-2026-62104?utm_campaign=x https://t.co/O7dcBKNGTl

    Post summary

    The tweet discloses an unauthenticated RCE vulnerability (CVSS 10) in WordPress Migratico Lite plugin versions <=2.6.8 and urges immediate update.

    00000147
    890 followersView on X

Explore more

Back to dashboard