Critical severity9.8NVD Advisory· Published Apr 1, 2026· Updated Apr 6, 2026
CVE-2026-30643
CVE-2026-30643
Description
An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- gist.github.com/0psPwn/10c43912adee9bfe2ff4fec947d4ee5anvdExploitThird Party Advisory
- www.dedecms.comnvdProduct
News mentions
0No linked articles in our index yet.