Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-5695

Multiple vulnerabilities in the Microweber administration panel

CVSS 4.0 8.4 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-5695

Published

Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without restrictions. An attacker could exploit this flaw to execute malicious code remotely (demonstrated by uploading the EICAR test file), which could result in the system being completely compromised.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-5695

Published

Administration panel

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Microweber",
                    "product": "Administration panel",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "2.0.19"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON