Executive brief
CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE
Affected products
- Packagist ci4-cms-erp/ci4ms
Junglewise Threat Intelligence
CVE-2026-41203: CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE
CVE-2026-41203 · Severity: medium · CVSS 4 · Published 2026-04-22
Technologies: ci4-cms-erp/ci4ms (Packagist). Vendors: Packagist.