[ Vendor · 3 CVEs ]
Thecosy
CVEs affecting Thecosy published in the last 30 days, plus any Thecosy CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111685 | 16 Oct 2026 | CVSS 7.5 | Thecosy IceCMSIceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num… | |
| CVE-2026-111686 | 16 Oct 2026 | CVSS 7.5 | Thecosy IceCMSIceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path… | |
| CVE-2026-111673 | 16 Oct 2026 | CVSS 9.8 | Thecosy IceCMSIceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account… |