CVE-2026-116063

4.7 MEDIUMpublic exploit available

Published 2026-10-25 · Updated 2026-10-26

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-74, CWE-94

Public exploit & PoC references

https://github.com/SDshadow/cve
https://github.com/SDshadow/cve/tree/main/DedeCMS/V5.7.118-update_guide-RCE/poc

All references

https://github.com/SDshadow/cve
https://github.com/SDshadow/cve/tree/main/DedeCMS/V5.7.118-update_guide-RCE/poc
https://vuldb.com/cve/CVE-2026-116063
https://vuldb.com/submit/999433
https://vuldb.com/vuln/426146
https://vuldb.com/vuln/426146/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2026-105135PoC
MEDIUMCVE-2026-105225PoC
MEDIUMCVE-2026-105226PoC
MEDIUMCVE-2026-105329PoC
MEDIUMCVE-2026-108816PoC
MEDIUMCVE-2026-108827
MEDIUMCVE-2026-108941PoC
MEDIUMCVE-2026-108943PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.