Information Disclosure Vulnerability in WMCMS by 重庆逐越光电科技有限公司
CVE-2026-108811

5.3MEDIUM

Key Information:

Vendor: 重庆逐越光电科技有限公司
Status: Wmcms
Vendor: CVE Published:; 12 October 2026

🔔 Create 重庆逐越光电科技有限公司 Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-108811?

A vulnerability has been discovered in WMCMS version 4.446.1257 that allows unauthorized parties to exploit a function within the /index.php file. By manipulating the argument path/file, this weakness can lead to sensitive information disclosure. Attackers can execute this exploit remotely, increasing the risk of compromise for systems running the affected version. The exploit details have been publicly released, making it crucial for organizations using WMCMS to understand the risks and implement mitigation strategies.

Affected Version(s)

WMCMS 4.446.1257

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-108811 - Proof of Concept