Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-2953 Path Traversal Vulnerability in Dromara UJCMS 101.2 Template Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2953
Post summary
The text announces a path traversal vulnerability (CVE-2026-2953) in Dromara UJCMS 101.2 Template Handler, with no additional details on exploitation or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ujcms | ujcms | 10.1.2 | - | - |