5.3
Medium
CVE-2026-76800 A flaw has been found in DeDeCMS 3
Description
A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DedeCMS | 3 | No fix stated |
References
- VDB-393317 | DeDeCMS select_media_post.php unrestricted upload vuldb.com
- VDB-393317 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-76800 | CVE Analysis and Report vuldb.com
- Submit #880081 | https://www.dedecms.com/ DeDeCMS v3 Unrestricted Upload vuldb.com
- uvxbywu62qm.feishu.cn uvxbywu62qm.feishu.cn
Timeline
- Published
- Last modified
Other CVEs of DedeCMS
The 54 CVEs of DedeCMS →
CVE-2026-116253
A vulnerability was determined in DedeCMS 5.7.118
6.9
Medium
CVE-2026-116063
A weakness has been identified in DedeCMS up to 5.7.118
5.1
Medium
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118
6.9
Medium
CVE-2026-76783
A security vulnerability has been detected in DeDeCMS 53_1_UTF8
6.9
Medium