CVE-2026-116063 | DedeCMS up to 5.7.118 dede/update_guide.php require_once vtime code injection

October 24, 2026 Yanac

A vulnerability classified as problematic has been found in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection.

This vulnerability is registered as CVE-2026-116063. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More