CVE-2026-113664 | ApostropheCMS up to 3.6.x Import-Export path traversal

October 20, 2026 Yanac

A vulnerability was found in ApostropheCMS up to 3.6.x. It has been declared as problematic. This issue affects some unknown processing of the component Import-Export Module. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2026-113664. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More