CVE-2026-38615

CriticalCVSS 9.8

Published: 09/06/2026(UTC)Updated: 10/06/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.02%

5th percentile — higher than 5% of all known CVEs

DedeCMS version 5.7.118 is vulnerable to Command Execution in file_manage_control.php.

Exploitation of this vulnerability could lead to unauthorized access and control over the system by an attacker.

It is recommended to update DedeCMS to the latest version to mitigate this vulnerability.

Original NVD description (English source)

DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.