PublicCMS vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

PU

Product

PublicCMS

by Sanluan · last CVE Oct 13, 2026

56

CVEs

0

On KEV

9.8

Max CVSS

1

New 30D

Vulnerabilities56 In the news0 Timeline

Severity mix

Critical 11High 18Medium 26Low 1

Severity

All severities56 Critical11 High18 Medium26 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add PublicCMS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-109160	4.3	0%	Oct 13	PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect Affected: 5.202608.a
CVE-2026-6797	4.3	0%	Apr 21	Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption Affected: 6.202506.a; 6.202506.b; 6.202506.c; 6.202506.d
CVE-2026-6796	4.3	0%	Apr 21	Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file Affected: 6.202506.a; 6.202506.b; 6.202506.c; 6.202506.d
CVE-2024-2911	4.3	0%	Mar 26	Tianjin PubliCMS cross-site request forgery Affected: 4.0.202302.e
CVE-2026-2010	4.2	0%	Feb 6	Sanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization Affected: 4.0.202506.a; 4.0.202506.b; 4.0.202506.c; 4.0.202506.d; 5.202506.a; 5.202506.b; +6 more
CVE-2026-97721	2.7	0%	Sep 25	Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization Affected: 6.202506.a; 6.202506.b; 6.202506.c; 6.202506.d; 6.202506.e