Medium severity4.7NVD Advisory· Published Sep 16, 2026

CVE-2026-92247

Description

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.3.5 is able to mitigate this issue. It is suggested to upgrade the affected component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Synaptikcms/synaptik-cmsllm-create
Range: <=1.3.4.4

Patches

Vulnerability mechanics

References

github.com/synaptikcms/synaptik-cms/releases/tag/v1.3.5nvd
vuldb.com/cve/CVE-2026-92247nvd
vuldb.com/submit/934183nvd
vuldb.com/vuln/404682nvd
vuldb.com/vuln/404682/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000