CVE-2026-36760 | thinkgem JeeSite 5.15.1 /a/file/upload fileMd5 path traversal (ID 530)

April 30, 2026 Yanac

A vulnerability categorized as critical has been discovered in thinkgem JeeSite 5.15.1. This affects an unknown part of the file /a/file/upload. Executing a manipulation of the argument fileMd5 can lead to path traversal.

This vulnerability is registered as CVE-2026-36760. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More