Code Injection Vulnerability in Arma Digital Media Inc. Website Template
CVE-2026-9160

4.3MEDIUM

Key Information:

Vendor

Arma Digital Media Inc.

Status
Website Template
Vendor
CVE Published:
11 September 2026

What is CVE-2026-9160?

The vulnerability arises from improper handling of special elements within the template engine of Arma Digital Media Inc.'s Website Template, which allows malicious actors to execute code injection attacks. This flaw can lead to unauthorized access and manipulation of sensitive data, exposing websites to potential exploitation. It is critical for users to update their affected templates immediately, as timely action can prevent potential security breaches.

Affected Version(s)

Website Template 0 <= 11092026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.