PT-2026-26326 · Dedecms · Dedecms

Jacobjacob + 1 · Publicado 2026-03-19 · Atualizado 2026-03-23 · CVE-2026-30694

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7.119

Description A flaw exists in DedeCMS that allows a remote attacker to execute arbitrary code through the array filter component. The issue does not require authentication.

Recommendations Update to version 5.7.119 or later.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2026-30694

Produtos afetados

Dedecms

Referências · 6

• 🔥 https://jacobjacobjacob.gitbook.io/cve-2026-30694 · Exploit
• 🔥 https://leixyous-personal-organization.gitbook.io/dedecms-file-manage-getshell-via-bypass-blacklist · Exploit
• https://twitter.com/CVEnew/status/2036024253578158121 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2034731497698054443 · Publicação no Twitter
• https://twitter.com/VolerionSec/status/2034696235127308418 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-30694 · Nota de Segurança