CVE-2026-118579

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 28, 2026

Last Seen

October 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Path Traversal Vulnerability in FearlessCMS Disclosed78.0

A critical vulnerability, CVE-2026-63190, has been identified in FearlessCMS, a flat-file content management system, allowing unauthenticated attackers to execute privileged PHP scripts in the `/admin/` directory. This flaw arises from improper authentication and path validation, enabling attackers...

Multiple Critical Vulnerabilities Disclosed for FearlessCMS and D-Link Devices67.5

On October 28, 2026, two critical vulnerabilities were disclosed: CVE-2026-63190 affecting FearlessCMS and CVE-2026-118579 impacting D-Link DIR-505 devices. FearlessCMS versions prior to 0.1.4 are vulnerable to an unauthenticated admin URI bypass, allowing arbitrary file writes and data exposure. Th...