CVE-2026-72604
MediumCVSS 6.5Summary
Path traversal vulnerability in Intelliants Subrion CMS through 4.2.1. Authenticated administrators can delete arbitrary files on the server via the admin panel file deletion endpoint, which passes a user-supplied file path directly to unlink() without sanitization.
Risk Assessment
An administrator can delete sensitive system files outside the web root, potentially causing server instability or facilitating further attacks.
Recommendation
Update Subrion CMS to a fixed version. Restrict access to the admin panel.
Original NVD description (English source)
A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink() without sanitization or path canonicalization. An authenticated administrator can delete sensitive system files outside the web root, potentially causing server instability or facilitating further attacks.