Medium severity6.3NVD Advisory· Published Aug 20, 2026

CVE-2026-76800

Description

A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published and may be used.

Affected products

Dedecms/Dedecmsllm-fuzzy

Patches

Vulnerability mechanics

References

uvxbywu62qm.feishu.cn/wiki/TKqDwJGYaiBVXpk3EtFcdjRDnsgnvd
vuldb.com/cve/CVE-2026-76800nvd
vuldb.com/submit/880081nvd
vuldb.com/vuln/393317nvd
vuldb.com/vuln/393317/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000