Skip to content
fr Sign in
6.9 Medium

CVE-2026-85137 A security vulnerability has been detected in SeaCMS up to 13.6

Description

A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacms_locoy_news.php of the component Locoy Collector. The manipulation of the argument pwd leads to code injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected products and versions

Product Affected versions Fixed in
SeaCMS 13.6 No fix stated
SeaCMS 13.5 No fix stated
SeaCMS 13.4 No fix stated
SeaCMS 13.3 No fix stated
SeaCMS 13.2 No fix stated
SeaCMS 13.1 No fix stated
SeaCMS 13.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SeaCMS

The 23 CVEs of SeaCMS →
CVE-2026-85138 A vulnerability was detected in SeaCMS up to 13.6 6.9 Medium CVE-2026-82603 A vulnerability was detected in SeaCMS up to 13.6 5.3 Medium CVE-2026-82602 A security vulnerability has been detected in SeaCMS up to 13.6 6.9 Medium CVE-2026-82601 A weakness has been identified in SeaCMS up to 13.6 5.3 Medium
Track this CVE