Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 05 Oct 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Directory Traversal Allows Arbitrary File Deletion in Feehi CMS | |
| Weaknesses | CWE-22 CWE-36 |
Mon, 05 Oct 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is passed to `unlink()` without path traversal or directory validation. | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-10-05T20:06:04.480Z
Reserved: 2026-09-22T00:00:00.000Z
Link: CVE-2026-95264
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-05T20:17:29.187
Modified: 2026-10-05T20:17:29.187
Link: CVE-2026-95264
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-05T21:45:20Z