Evolution CMS — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
May 10, 2026
Last Seen
May 10, 2026

Evolution CMS is a technology platform tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed May 10, 2026; most recent activity May 10, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2021-47939 CVE Vulnerability Disclosures / 6h Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in the 'post' parameter to create modules that execute arbitrary commands when invoked. — cve.report · May 10, 2026
  • Ghsa W3hh X22g Mhjw — db.gcve.eu · May 10, 2026
  • CVE-2021-47939 - Exploits & Severity — Feedly · May 10, 2026

Related Entities

Zero-day Exploit CVE-2021-47939 CWE-78 - OS Command Injection CWE-94 - Code Injection T1059.004 - Unix Shell T1059 - Command and Scripting Interpreter T1505.003 - Web Shell Evolution CMS 3.1.6 PHP Code Injection In Module Parameters

CVSS v3.1 Breakdown