CVE-2026-113388 | opensource-socialnetwork up to 9.11/10.1 Cache Settings dynamic.php input host/port/username/password/type/status code injection

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code injection.

This vulnerability is identified as CVE-2026-113388. The attack can be initiated remotely. Additionally, an exploit exists.

Applying a patch is the recommended action to fix this issue.

The vendor explains: “While we have implemented this patch as a defense-in-depth measure, we emphasize that in Open Source Social Network (OSSN), site administrators are fully trusted users who are intentionally granted broad system authority by design including the native ability to upload custom components/themes containing arbitrary PHP code.”VulDB Recent EntriesRead More