CVE-2026-36762 | thinkgem JeeSite 5.15.1 File Upload /a/file/upload fileEntityId path traversal

April 30, 2026 Yanac

A vulnerability identified as critical has been detected in thinkgem JeeSite 5.15.1. This vulnerability affects unknown code of the file /a/file/upload of the component File Upload Handler. The manipulation of the argument fileEntityId leads to path traversal.

This vulnerability is documented as CVE-2026-36762. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More