← All advisories

Critical severity9.8NVD Advisory· Published Apr 1, 2026· Updated Apr 6, 2026

CVE-2026-30643

CVE-2026-30643

Description

An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Dedecms/Dedecms2 versions
cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*range: <=5.7.118
- (no CPE)range: = 5.7.118

Patches

Vulnerability mechanics

References

2

gist.github.com/0psPwn/10c43912adee9bfe2ff4fec947d4ee5anvdExploitThird Party Advisory
www.dedecms.comnvdProduct

News mentions

0

No linked articles in our index yet.