auxiliary/scanner/http/concrete_cms_file_usage_disclosure

functional

Concrete CMS Unauthenticated File Usage Disclosure

view exploit source metasploittype auxiliarypublished 2026-05-21catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-6826US	medium5.3	1.46% (73rd)	Exploit	2026-05-21
Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. Any unauthenticated visitor can request…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.