Advisories

Vulnerabilities in WidzialniCMS software

CERT Polska coordinated disclosure of 4 vulnerabilities (CVE-2026-110468, CVE-2026-110469, CVE-2026-112204 and CVE-2026-112205) found in WidzialniCMS software.

Read at CERT Polska

• CERT Polska (cert.pl)
• CVE-2026-110468 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-110469 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-112204 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-112205 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 23
   CVE NVD 4h ago

   WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality.

   CVSS 6.9 Fix available CVE-2026-112205 Fundacja Widzialni
2. 23
   CVE NVD 4h ago

   WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint.

   CVSS 5.1 Fix available CVE-2026-112204 Fundacja Widzialni
3. 38
   CVE NVD 4h ago

   WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint.

   CVSS 10.0 Fix available CVE-2026-110469 Fundacja Widzialni
4. 38
   CVE NVD 4h ago

   WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint.

   CVSS 10.0 Fix available CVE-2026-110468 Fundacja Widzialni