Local File Access Vulnerability in e107 CMS by e107 Inc.

CVE-2026-43936

What is CVE-2026-43936?

A vulnerability exists in e107 CMS versions prior to 2.3.4 that allows unauthorized access to local environment files. By manipulating the 'Image/File URL' field in the Media Manager on the administrator screen, an attacker could exploit this weakness to gain unauthorized access to sensitive files or data. This issue has been addressed in version 2.3.4, emphasizing the necessity for users to update to the latest version to ensure their systems are secure.

References