CVE-2026-38615

CriticalCVSS 9.8

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.82%

53th percentile - higher than 53% of all known CVEs

A command execution vulnerability in DedeCMS V5.7.118 in file_manage_control.php allows an attacker to execute arbitrary commands on the server.

An attacker can remotely execute arbitrary system commands, potentially leading to full server compromise and data breach.

Immediately update DedeCMS to the latest version and apply security patches.

Original NVD description (English source)

DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php.