IC
Product
icms2
by instantsoft · last CVE Oct 11, 2026
10
CVEs
0
On KEV
7.2
Max CVSS
3
New 30D
Severity mix
Critical 0High 3Medium 5Low 2
Watch

Add icms2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108566
3.5
0%
Oct 11
InstantSoft icms2 Private Message index.tpl.php index cross site scripting
Affected: 2.18.0; 2.18.1; 2.18.2
CVE-2026-48707
3.1
0%
Sep 8
InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning
Affected: < 2.18.2
Showing 2