CVE-2026-19357— MingSoft MCMS ms-mdiy get information disclosure
Possible ATT&CK Techniques 1AI
T1005 · Data from Local SystemGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-19357
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MingSoft MCMS ms-mdiy get information disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy/form/get of the component ms-mdiy. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-19357
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19357
请登录查看更多情报信息。
Same Patch Batch · MingSoft · 2026-08-09 · 3 CVEs total
| CVE-2026-19355 | 7.3 HIGH | MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection |
| CVE-2026-19356 | 5.3 MEDIUM | MingSoft MCMS ms-mdiy list information disclosure |
IV. Related Vulnerabilities
Same product: MCMS
- CVE-2026-19356
MingSoft MCMS ms-mdiy list information disclosure - CVE-2026-19355
MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData - CVE-2026-4954
mingSoft MCMS Web Content List Endpoint ContentAction.java l - CVE-2026-4953
mingSoft MCMS Editor Endpoint BaseAction.java catchImage ser - CVE-2026-2666
mingSoft MCMS Template Archive uploadTemplate.do unrestricte
Same vendor: MingSoft
- CVE-2026-19356
MingSoft MCMS ms-mdiy list information disclosure - CVE-2026-19355
MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData - CVE-2026-4954
mingSoft MCMS Web Content List Endpoint ContentAction.java l - CVE-2026-4953
mingSoft MCMS Editor Endpoint BaseAction.java catchImage ser - CVE-2026-2666
mingSoft MCMS Template Archive uploadTemplate.do unrestricte
Same weakness: CWE-200
- CVE-2026-19356
MingSoft MCMS ms-mdiy list information disclosure - CVE-2026-19245
HKUDS nanobot Login-shell Environment shell.py ExecTool._pre - CVE-2026-48007
Element Call reports full URLs of visited pages to analytics - CVE-2026-71849
Hono: Proxy Helper does not remove response headers listed i - CVE-2026-47364
Datadog Android应用Crashlytics用户ID标识漏洞
V. Comments for CVE-2026-19357
No comments yet