TI-2019-15739 CVE-2019-25687 · GHSA-2284-8cw5-5697Pegasus CMS 1.0 Remote Code Execution via extra_fields.phpPriority HIGH 81Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by exploiting unsafe eval functionality.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01441 · Published 2026-04-05 · No fix listed CWE-22