Discuz! X5.0 vulnerabilities
3 known CVE vulnerabilities in Discuz! X5.0, translated and rated.
- CVE-2026-49952Critical
Discuz! X5.0 versions from 20260320 to 20260501 contain an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality. By exploiting a shared cryptographic key, attackers can inject crafted payloads through the username parameter during login.
- CVE-2026-49954High
Discuz! X5.0 versions from 20260320 to 20260610 contain a local file inclusion vulnerability that allows authenticated administrators to execute arbitrary code by importing a specially crafted plugin configuration containing path traversal sequences.
- CVE-2026-49953Medium
Discuz! X5.0 versions from 20260320 to 20260610 contain a CAPTCHA bypass vulnerability that allows unauthenticated remote attackers to defeat challenge controls by exploiting limited complexity and predictable character sets in generated CAPTCHA images.