CVE-2024-42636: Dedecms

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.

Affected products

• Dedecms Dedecms: version 5.7.115 only

Published 2024-08-23. Last modified 2026-06-17.