Medium severity4.7NVD Advisory· Published Sep 14, 2026

CVE-2026-90709

Description

A security vulnerability has been detected in Yot CMS up to 3.3.1. Affected by this issue is the function eval of the file modsys/console/admin.php of the component Admin Console. Such manipulation of the argument text leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Yot CMS/Admin Consolellm-create
Range: <=3.3.1

Patches

Vulnerability mechanics

References

github.com/dddwmr/CVE/blob/main/YOT%20III%20modsys%3Aconsole%20admin%20eval%20of%20POST%20text%20leads%20to%20remote%20code%20execution.mdnvd
vuldb.com/cve/CVE-2026-90709nvd
vuldb.com/submit/918371nvd
vuldb.com/vuln/403251nvd
vuldb.com/vuln/403251/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000