CVE-2026-6797: Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption
A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vulnerability is the function ZipSecureFile.setMinflateRatio of the file common/src/main/java/com/publiccms/common/tools/DocToHtmlUtils.java. Such manipulation leads to resource consumption. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6797?
CVE-2026-6797 has been classified as a moderate severity vulnerability due to its potential for resource exhaustion.
How do I fix CVE-2026-6797?
To fix CVE-2026-6797, update Sanluan PublicCMS to a version higher than 6.202506.d where the vulnerability has been patched.
What types of systems are affected by CVE-2026-6797?
CVE-2026-6797 affects the Sanluan PublicCMS software versions up to 6.202506.d.
What potential impact does CVE-2026-6797 have on systems?
The potential impact of CVE-2026-6797 includes denial of service due to excessive resource consumption.
Are there any workarounds for CVE-2026-6797?
Currently, no official workarounds are provided for CVE-2026-6797 other than upgrading to a safe version.