5.1
Medium
CVE-2026-116063 A weakness has been identified in DedeCMS up to 5.7.118
Description
A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DedeCMS | 5.7.118 | No fix stated |
References
- VDB-426146 | DedeCMS update_guide.php require_once code injection vuldb.com
- VDB-426146 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-116063 | CVE Analysis and Report vuldb.com
- Submit #999433 | DedeCMS 5.7.118 Code Injection vuldb.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of DedeCMS
The 54 CVEs of DedeCMS →
CVE-2026-116253
A vulnerability was determined in DedeCMS 5.7.118
6.9
Medium
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118
6.9
Medium
CVE-2026-76800
A flaw has been found in DeDeCMS 3
5.3
Medium
CVE-2026-76783
A security vulnerability has been detected in DeDeCMS 53_1_UTF8
6.9
Medium