MaxSite MaxSite CMS

• CVE-2026-87930 High 8.1 MaxSite CMS through 109.6 PHP Object Injection via ci_session 0.6%
• CVE-2026-87929 Critical 9.8 MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key 0.5%
• CVE-2026-87928 Medium 5.4 MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page 0.3%
• CVE-2026-87927 High 8.2 MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher 0.6%
• CVE-2026-70554 Critical 9.8 MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie 1.2%
• CVE-2026-70553 Critical 9.8 MaxSite CMS Unauthenticated RCE via Install Endpoint 1.3%
• CVE-2026-70552 Critical 9.8 MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php 0.8%