Is CVE-2026-76800 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-76800?

CVE-2026-76800 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-76800

Description

A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_media_post.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published and may be used.