Kunstmaan bundles-cms

• CVE-2026-104890 High 7.2 Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution 0.4%