CVE-2018-17934: NUUO CMS

Critical severity, CVSS 9.8. EPSS: 19.7% chance of exploitation in the next 30 days.

NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.

Affected products

• NUUO NUUO CMS: up to and including 3.3

Published 2018-11-27. Last modified 2026-06-17.