CVE-2026-114622 | baserproject BaserCMS up to 5.2.3/5.3.1/5.4.0/5.4.1 Admin API update fullpath path traversal (EUVD-2026-108993)

October 23, 2026 Yanac

A vulnerability was found in baserproject BaserCMS up to 5.2.3/5.3.1/5.4.0/5.4.1. It has been rated as problematic. Affected by this issue is the function ThemeFilesService::update of the component Admin API. Performing a manipulation of the argument fullpath results in path traversal.

This vulnerability was named CVE-2026-114622. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More