Skip to content
Threat Feed
Subscribe

Vendor

FearlessCMS

1 brief RSS
critical advisory

FearlessCMS: Unauthenticated debug script RCE and information disclosure (CVE-2026-63190)

CVE-2026-63190 allows unauthenticated attackers to bypass authentication via path normalization discrepancies to execute arbitrary filesystem operations, read sensitive files, and perform stored XSS in FearlessCMS versions prior to 0.1.4.

FearlessCMS web-application cms remote-code-execution cve
1r 2t 1c