CVE-2026-1111: Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal
A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1111?
The severity of CVE-2026-1111 is considered high due to its potential for path traversal attacks.
How do I fix CVE-2026-1111?
To fix CVE-2026-1111, update Sanluan PublicCMS to the latest version that addresses this vulnerability.
What does CVE-2026-1111 affect?
CVE-2026-1111 affects the TaskTemplateAdminController.java file in Sanluan PublicCMS up to version 5.202506.d.
Can CVE-2026-1111 allow unauthorized access?
Yes, CVE-2026-1111 can allow unauthorized access to files on the server through path traversal.
Is CVE-2026-1111 publicly known?
Yes, CVE-2026-1111 is publicly documented in the Common Vulnerabilities and Exposures database.