VULNERABILITY INTELLIGENCE

CVE-2026-54065

CVSS score8.7 HIGH

EPSS probability0.18%

CISA KEVNot currently listed

Published2026-07-13

Last modified2026-07-13

Description

## Summary Path Traversal to Arbitrary File Deletion in the Edit Comment admin function. An authenticated administrator can delete arbitrary files within the application root (e.g., `config.php`) by injecting a crafted `attach` parameter, rendering the application inoperable. ## Affected Component…