CVE-2022-35426: Ucms Project Ucms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.

Affected products

• Ucms Project Ucms: version 1.6 only

Published 2022-08-10. Last modified 2026-06-17.