Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

MaxSite CMS hardcoded session key and validation flaw enabling unauthenticated admin takeover

github.com 2026-09-10 查看中文 →

Security Advisory Critical MaxSite

Affected:

MaxSite CMS 10.6.0
MaxSite CMS < 10.6.0

Referenced CVEs: CVE-2026-87930 · 8.1 CVE-2026-87929 · 9.8

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

PHP Local File Inclusion via base64 path traversal with fix and PoC 2026-09-10 CodeIgniter CMS 3.0 Default Configuration Security Analysis & Hardening Guide 2026-09-10 MaxSite CMS 1.0.5 RCE Vulnerability Analysis & POC 2026-09-10 MaxSite CMS 10.6 init.php RCE Vulnerability Analysis & Fix 2026-09-10 maxsite/cms: Authenticated Arbitrary File Write & Stored XSS via Upload Handler 2026-09-10

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro