CVE-2026-103528 | Thelia up to 2.6.0 Messages Configuration Interface system/exec/file_put_contents/file_get_contents special elements in template engine

October 12, 2026 Yanac

A vulnerability was found in Thelia up to 2.6.0. It has been classified as problematic. This impacts the function system/exec/file_put_contents/file_get_contents of the component Messages Configuration Interface. This manipulation causes improper neutralization of special elements used in a template engine.

This vulnerability appears as CVE-2026-103528. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More