CVE-2026-79426

An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request.

高CWE-73 すべてのCVE

脆弱性の種類

An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request.

参考情報

https://github.com/crmeb/CRMEB
https://github.com/returnwrong/returnwrong-security-advisories/blob/main/CVE-2026-79426.md
https://github.com/returnwrong/returnwrong-security-advisories/blob/main/CVE-2026-79426.md

攻撃者より先に脆弱性を見つけましょう。

GitHubでサインインすれば、1分以内に最初の監査を実行できます。無料プランはクレジットカード不要です。

無料で監査を始める料金を見る