CVE-2026-102771

MediumCVSS 4.7

Published: 29/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 30/09/2026(UTC)NVD NIST

Summary

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. The function MailController::templatePut in cmf-api/src/admin/controller/MailController.php of the Email Template component is affected. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be carried out remotely, and the exploit has been publicly disclosed.

Risk Assessment

An attacker could remotely exploit the vulnerability to inject malicious template code, potentially leading to arbitrary code execution or data disclosure. Public disclosure of the exploit increases the risk.

Recommendation

Upgrade ThinkCMF to a version newer than 8.0.7 if available. In the meantime, restrict access to the administrative interface and monitor for suspicious activity.

Other vulnerabilities in ThinkCMF

CVE-2026-111352High
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpoint because Auth::check() fails open when no admin_api rule exists. Attackers with a valid admin-type API token can list member emails and mobile numbers, disable members, and call PUT admin/roles/{id}/authorize to grant themselves full administrator rights.

Original NVD description (English source)

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. The manipulation leads to improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS