CVE-2026-25099
HIGHRemote Code Execution via Unrestricted File Upload in Bludit
Title source: cnaExploitation Summary
EIP tracks 2 public exploits for CVE-2026-25099. PoCs published by yahia, yahiahamza.
AI-analyzed exploit summary This exploit demonstrates an authenticated file upload vulnerability in Bludit CMS API plugin, allowing an attacker with a valid API token to upload a PHP webshell and achieve remote code execution. The exploit automates the process of retrieving a page key, uploading the shell, and executing commands.
Description
Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution. This issue was fixed in 3.18.4.
Exploits (2)
This exploit demonstrates an authenticated file upload vulnerability in Bludit CMS API plugin, allowing an attacker with a valid API token to upload a PHP webshell and achieve remote code execution. The exploit automates the process of retrieving a page key, uploading the shell, and executing commands.
This repository contains a functional exploit for CVE-2026-25099, demonstrating an unrestricted file upload vulnerability in Bludit CMS versions before 3.18.4. The exploit uploads a PHP webshell via the API endpoint and achieves remote code execution.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H