VYPR
← All advisories
High severity7.2NVD Advisory· Published Apr 6, 2022· Updated Jul 9, 2026

CVE-2022-26607

CVE-2022-26607

Description

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

3
  • Baigo/CMS
    cpe:2.3:a:baigo:baigo_cms:3.0:alpha2:*:*:*:*:*:*
  • baigo CMS/baigo CMSdescription
  • Baigostudio/Baigocmsllm-fuzzy
    Range: v3.0-alpha-2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.