High severity7.2NVD Advisory· Published Apr 6, 2022· Updated Jul 9, 2026

CVE-2022-26607

Description

A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

Baigo/Baigo CMS
cpe:2.3:a:baigo:baigo_cms:3.0:alpha2:*:*:*:*:*:*
Baigostudio/Baigocmsllm-fuzzy
Range: v3.0-alpha-2
baigo CMS/baigo CMSdescription

Patches

Vulnerability mechanics

References

github.com/baigoStudio/baigoCMS/issues/9nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000