MEDIUMCVSS v3.1 4.7Vulnerability
CVE-2026-116063
A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-10-25T18:51:19.214402+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 4.7
- Retrieved at
- 2026-10-25T18:52:40+00:00
- Score
- 4.7
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-116063
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- First seen by Signal
- 2026-10-25T18:52:40+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- Published at
- 2026-10-25T18:16:47.110
- Last modified
- 2026-10-25T18:16:47.110
Related Entities (2)
Explore deeper with Ninja Signal's threat intelligence graph