CVE-2026-30694

CRITICAL

DedeCMS <=5.7.118 array_filter - Remote Code Execution

Title source: manual
STIX 2.1

Description

An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0041
EPSS Percentile 61.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-94
Status published
Products (1)
dedecms/dedecms < 5.7.118
Published Mar 19, 2026
Tracked Since Mar 19, 2026