CVE-2026-103535 | Thelia up to 2.6.1 Translation Editor item_name path traversal

October 12, 2026 Yanac

A vulnerability was found in Thelia up to 2.6.1. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Translation Editor. Performing a manipulation of the argument item_name results in path traversal.

This vulnerability is known as CVE-2026-103535. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More