5.3
Medium
CVE-2026-10581 A flaw has been found in DedeCMS 5.7.88
Description
A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64_decode of the file /plus/download.php?open=1. This manipulation of the argument Link causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DedeCMS | 5.7.88 | No fix stated |
References
- VDB-367676 | DedeCMS download.php base64_decode server-side request forgery vuldb.com
- VDB-367676 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-10581 | CVE Analysis and Report vuldb.com
- Submit #829404 | DedeCMS DedeCMS Content Management System v5.7.88 Server-Side Request Forgery (SSRF) / Open Redirect vuldb.com
Timeline
- Published
- Last modified