CVE-2026-14749

HIGH

CVSS v3

7.3

HIGH

EPSS Score

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imba_calculator/calculate.php. The manipulation of the argument mathematical_sentence leads to code injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or

Technical Details

CVSS v3 Vector
3.1
Published
7/5/2026
Last Modified
7/5/2026

Frequently Asked Questions

What is CVE-2026-14749?

A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imba_calculator/calculate.php. The manipulation of the argument mathematical_sentence leads to code injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or

Is CVE-2026-14749 actively exploited?

Active exploitation of CVE-2026-14749 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-14749?

CVE-2026-14749 has a CVSS v3 base score of 7.3 (HIGH severity), with vector string 3.1.

Is CVE-2026-14749 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.