DedeCMS Arbitrary Code Execution Vulnerability

Vulnerability

A vulnerability allowing remote code execution has been identified in DedeCMS versions through 5.7.118. The issue arises in the array_filter component, where improper input handling can be exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server where DedeCMS is installed.

Added: Mar 19, 2026, 6:19 PM
Updated: Mar 19, 2026, 6:19 PM

Vulnerability Rating

Custom Algorithm
spread
6.4
impact
7.5
exploitability
9.7
remediation
0.0
relevance
2.7
threat
6.4
urgency
2.9
incentive
8.3

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.