Research on CMS

Articles from across our research that cover this topic.

2 articles

Vulnerability disclosure11 February 2026
From Zero to Shell: Exploiting Default Secrets in CrafterCMS
Double misconfigurations in the default CrafterCMS installation result in a critical vulnerability that allows authentication bypass, leading to administrative access and RCE
Vulnerability disclosure16 August 2025
Our Research Story: Unauthenticated RCE in Ametys CMS 4.7.x
Our Research Story: Unauthenticated RCE in Ametys CMS 4.7.x