CVE-2026-116063

CVE-2026-116063 · DedeCMS update_guide.php require_once code injection

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

CVSS 5.1 · Media · EPSS 0,3%

Publicación

2026-10-25T17:45:12.345Z

Actualización

2026-10-26T16:39:15.047Z

Comprueba tu servidor →