Advisories · Technology

fearlessgeekmedia FearlessCMS.

Every CVE that names fearlessgeekmedia FearlessCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-63190 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS
- fearlessgeekmedia FearlessCMS
- Path traversal
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2026
CVE-2026-55695 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater
- fearlessgeekmedia FearlessCMS
- Code injection
Not analysed yet 13 Oct 2026