Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature that allows for arbitrary file reads. This issue has not been fixed at the time of publication.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 CVE-2026-27202: Unauthenticated arbitrary file read in GetSimple CMS lets anyone grab sensitive data. No patch; disable file uploads or restrict access. Full advisory ➡️ https://volerion.com/vulnerabilities/CVE-2026-27202 #infosec #CMS #AppSec
Post summary
The advisory confirms an unauthenticated file-read flaw in GetSimple CMS and urges disabling uploads or restricting access while no patch is available.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | getsimple-ce | getsimple_cms | 3.3.22 | - | - |