CVE-2026-19353 | DedeCMS up to 5.7.118 UTF8SP2 Installation Wizard install/index.php _4_Setup file inclusion

A vulnerability categorized as problematic has been discovered in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the function _4_Setup of the file install/index.php of the component Installation Wizard. Such manipulation leads to file inclusion.

This vulnerability is documented as CVE-2026-19353. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More