CVE-2026-51078

HighCVSS 7.5

Published: 27/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

An issue in Dede CMS version 5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file_manage_control.php component.

Risk Assessment

Disclosure of sensitive information can enable further attacks, such as privilege escalation or access to confidential data.

Recommendation

Update Dede CMS to a version later than 5.7.118, which contains the fix for this vulnerability.

Other vulnerabilities in Dede CMS

CVE-2026-51077High
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component.

Original NVD description (English source)

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file_manage_control.php component