CVE-2026-79773
Winter CMS before 1.2.13 Local File Inclusion via JavaScript
CVSS score
6.9
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.3
CVE-2026-79774
Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy
W
Patch verifiedEPSS %1
6.8
CVE-2026-32639
Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads
W
Patch verifiedEPSS %0
7.1
CVE-2026-35445
Winter: Authenticated backend users can bypass Users controller permission checks
W
Patch verifiedEPSS %0
8.1
CVE-2026-32258
Winter: Stored XSS through Editor Settings custom styles
W
Patch verifiedEPSS %0
8.1
CVE-2026-32257
Winter: Stored XSS through Brand Settings custom styles
W
Patch verifiedEPSS %0
4.9
CVE-2026-63179
Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets
W
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-79773"