PT-2026-48472 · Silverpeas+1 · Silverpeas+1

CVE-2026-53698 · Published 2026-06-10 · Updated 2026-06-10

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Silverpeas versions prior to 6.4.7

Description The software mishandles the Personal space feature, which occurs when no componentId is set.

Recommendations Update to version 6.4.7 or later.

Exploit

Fix

Weakness Enumeration

CWE-36

Related Identifiers

CVE-2026-53698

Affected Products

Silverpeas

Silverpeas Core

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53698.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-53698 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53698 · Security Note
• https://github.com/Silverpeas/Silverpeas-Core/commit/caa6e6d1ac967ebd29b39e11c2ef5e7fd0047eec · Note
• https://github.com/Silverpeas/Silverpeas-Core/blob/983c5d07928b8a5ddcb39cc17d7fb9a0d87019b9/core-war/src/main/java/org/silverpeas/web/servlets/FileServer.java#L120-L122 · Note
• https://github.com/Silverpeas/Silverpeas-Core/blob/983c5d07928b8a5ddcb39cc17d7fb9a0d87019b9/core-war/src/main/java/org/silverpeas/web/servlets/FileServer.java#L150-L153 · Note
• https://tracker.silverpeas.org/issues/15229 · Note