5.1
Moyenne
CVE-2026-116063 A weakness has been identified in DedeCMS up to 5.7.118
Description
A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DedeCMS | 5.7.118 | Pas de correctif indiqué |
Références
- VDB-426146 | DedeCMS update_guide.php require_once code injection vuldb.com
- VDB-426146 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-116063 | CVE Analysis and Report vuldb.com
- Submit #999433 | DedeCMS 5.7.118 Code Injection vuldb.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de DedeCMS
Les 54 CVE de DedeCMS →
CVE-2026-116253
A vulnerability was determined in DedeCMS 5.7.118
6.9
Moyenne
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118
6.9
Moyenne
CVE-2026-76800
A flaw has been found in DeDeCMS 3
5.3
Moyenne
CVE-2026-76783
A security vulnerability has been detected in DeDeCMS 53_1_UTF8
6.9
Moyenne