CVE-2026-76800

creationtimestamp| type| source ---|---|--- 2026-08-20 03:58:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5kq2ocmjpslig...

CVE-2026-76800

DeDeCMS 3 is affected by an unrestricted file upload vulnerability in /include/dialog/select_media_post.php. Manipulating the uploadfile argument allows a remote, authenticated attacker (low privileges) to upload arbitrary files, potentially leading to code execution. The vulnerability is rated C...