CVE-2026-65694

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter. Attackers can send a single unauthenticated HTTP GET...

CVE-2025-60954

Microweber CMS 2.0 is vulnerable to Weak Password Requirements (CWE-521) within the password reset process. The application fails to enforce minimum password length or complexity, allowing users to set extremely weak passwords, such as single-character strings. This flaw can lead to account compr...

Microweber CMS 路径遍历漏洞

Microweber CMS is a drag-and-drop website builder from Microweber Open Source. A path traversal vulnerability exists in Microweber CMS version 1.2.11 and earlier, which stems from a file inclusion issue that could lead to a file readout...