easycms vulnerabilities and fixes

Recent CVEs affecting easycms, with upgrade or downgrade steps. 3 tracked.

easycms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-03-08. Highest priority: CVE-2026-1105 (score 46/100).

• CVE-2026-3786 MEDIUM 6.3 UPGRADE A security flaw has been discovered in EasyCMS up to 1.6
• CVE-2026-3785 MEDIUM 6.3 UPGRADE A vulnerability was identified in EasyCMS up to 1.6
• CVE-2026-1105 HIGH 7.3 UPGRADE A vulnerability was identified in EasyCMS up to 1.6

FAQ

How do I fix easycms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is easycms being exploited right now?

None of the tracked easycms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which easycms CVE should I patch first?

CVE-2026-1105 currently ranks highest (46/100): A vulnerability was identified in EasyCMS up to 1.6.

RSS feed for easycms · ← Back to latest CVEs