Information Disclosure Vulnerability in Dede CMS by DedeCMS
CVE-2026-51078

7.5HIGH

Key Information:

Vendor

DedeCMS

Status
Dede CMS
Vendor
CVE Published:
27 July 2026

What is CVE-2026-51078?

Dede CMS version 5.7.118 contains a vulnerability in the file_manage_control.php component, specifically through the str parameter, which allows remote attackers to gain unauthorized access to sensitive information. This issue can lead to the exposure of personal data and other confidential information, potentially putting users at significant risk.

References

https://www.dedecms.com/
https://gitee.com/etera1i2e/cve-2026-51078/blob/master/RE...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.