Sploitus

New CVE Exploits Affect DedeCMS with Remote Code Execution Vulnerability

First seen 25 Sep 2026, 06:26 UTC • •54.9

Article Content

1 / 3

Browse articles

ThreatCluster •September 25, 2026 at 10:54 UTC

•CVE-2026-XXXX allows remote code execution in DedeCMS.
•The vulnerability has a CVSS score of 7.2/8.8, indicating high severity.
•Proof-of-concept scripts are available but are non-weaponized.

A newly discovered vulnerability in DedeCMS (CVE-2026-XXXX) allows for remote code execution through the 'dede/update_guide.php' script. The vulnerability has a CVSS score of 7.2/8.8 and was disclosed on September 25, 2026. The affected version is DedeCMS V5.7.118, and the advisory includes non-weaponized proof-of-concept scripts for educational purposes. This vulnerability is significant as it could potentially allow attackers to execute arbitrary code on affected systems. The advisory emphasizes that the proof-of-concept scripts are for authorized testing only, and misuse is not condoned. Current status indicates that the vulnerability is now public, and organizations using DedeCMS should take immediate action to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2021-12-10

CVE-2021-44228 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2023-03-14

CVE-2023-23397 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2024-04-12

CVE-2024-3400 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-09-25

CVE-2026-XXXX disclosed

DedeCMS vulnerability allows remote code execution through 'dede/update_guide.php'.

More articles in this cluster (2)

Threat Graph

12 entities, 19 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Vulnerability (5)

CVE-2021-44228
CVE-2023-23397
CVE-2024-3400
EternalBlue
Log4Shell

Weakness (2)

Cwe-352 - Cross-Site Request Forgery (csrf)
CWE-94 - Code Injection

Indicator (1)

first.org

Affected Platform (1)

DedeCMS

Tool (2)

Metasploit
Nuclei

Relationships

Metasploit exploits CVE-2021-44228
Metasploit exploits CVE-2023-23397
Metasploit exploits CVE-2024-3400
Metasploit exploits EternalBlue
Metasploit exploits Log4Shell
Nuclei exploits CVE-2021-44228
Nuclei exploits CVE-2023-23397
Nuclei exploits CVE-2024-3400
Nuclei exploits EternalBlue
Nuclei exploits Log4Shell
CVE-2021-44228 targets DedeCMS
CVE-2023-23397 targets DedeCMS
CVE-2024-3400 targets DedeCMS
EternalBlue targets DedeCMS
Log4Shell targets DedeCMS
Zero-day Exploit targets DedeCMS
CVE-2021-44228 related to Cwe-352 - Cross-Site Request Forgery (csrf)
CVE-2021-44228 related to CWE-94 - Code Injection
CVE-2021-44228 related to first.org

Following this threat?

Track CVE-2021-44228 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

China-Linked QTFY Group Targets Critical Infrastructure with Advanced Exploits The Joint Cybersecurity Advisory JCSA-20260826-01, released on August 26, 2026, details ongoing activities by the China-linked hacking group QTFY, attributed to Nanjing Xinjiuwei Network Technology Co. Active since 2018, QTFY employs platforms like QScan and QTRouter to exploit vulnerabilities in critical…

Critical Vulnerabilities in Docker Sandboxes Expose macOS Hosts Docker has announced the resolution of two critical vulnerabilities in Docker Sandboxes affecting macOS systems. CVE-2026-77179 allows malicious code in a Docker virtual machine to escape its project directory and access host files, potentially leading to code execution. This flaw affects versions 0.28.0 to 0.41.9 and…