Login Request a demo
IC
Product
IceCMS
by Thecosy · last CVE Oct 16, 2026
23
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 5High 10Medium 7Low 1
Severity
All severities23Critical5High10Medium7Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add IceCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111673
9.8
1%
Oct 16
IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints
Affected: through 4.1.5
CVE-2024-48202
9.8
1%
Oct 30
icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile
Affected: through 3.4.7
CVE-2024-46612
9.8
1%
Sep 24
IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information
Affected: before 3.4.7
CVE-2023-6756
9.8
1%
Dec 13
Thecosy IceCMS Captcha login excessive authentication
Affected: 2.0.1
CVE-2023-40833
9.8
1%
Oct 12
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting
Affected: 1.0.0
Showing 5