Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-1978

kalyan02 NanoCMS User Information pagesdata.txt direct request

Description

A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the file /data/pagesdata.txt of the component User Information Handler. Performing a manipulation results in direct request. It is possible to initiate the attack remotely. The exploit is now public and may be used. You should change the configuration settings.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kalyan02 NanoCMS

  • 0.1affected
  • 0.2affected
  • 0.3affected
  • 0.4affected

References