Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 2.1 .0040 32.7 —
AFFECTED Product Versions Fixed TallCMS 4.0 – —
TIMELINE Oct 5 Reserved by VulDB Oct 5 Published (CNA: VulDB) Oct 7 EXPLOIT PUBLISHED — CVE-2026-105329 (TallCMS). Public exploit reference added.
A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component PluginManager. Executing a manipulation can lead to code injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called fdc18f4c6a36134f8986ca1d7e4e97092e3deb93. It is best practice to apply a patch to resolve this issue.
| Date | Event | Detail |
|---|---|---|
| October 5, 2026 | Reserved | Reserved by VulDB |
| October 5, 2026 | Published | Published (CNA: VulDB) |
| October 7, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-105329 (TallCMS). Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| n/a | TallCMS | — | 4.0 | — |
Authoritative record: CVE-2026-105329 at cve.org
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-105329 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Thursday, October 8, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
