CVE WATCH / VULNERABILITY DETAIL
CVE-2026-108799
HIGHCVSS 7.3NVD feed
Published 12 October 2026 · tracked since 12 October 2026
Description
A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument ema
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-84166 MEDIUM 4.3
- CVE-2026-108805 HIGH 7.3
- CVE-2026-108806 HIGH 7.3
- CVE-2025-15703 LOW 3.5
- CVE-2026-107791 MEDIUM 6.5
- CVE-2026-87690 HIGH 8.8
- CVE-2026-21133
- CVE-2026-21134
- CVE-2026-21135
- CVE-2026-21139