Skip to content

CVE-2026-3395

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
March 2, 2026
Last Seen
March 2, 2026
API
Exploited in Wild
Ransomware Use
Public Exploits
Attack Vector

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A code injection vulnerability has been identified in MaxSite CMS versions up to 109.1, affecting the MarkItUp Preview AJAX Endpoint. This flaw allows remote attackers to execute arbitrary code via manipulated input sent to the eval function. Users are advised to upgrade to version 109.2, which incl...

Public Exploits

Checking GitHub for proof-of-concept code…