Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-19 | 2 | Disclosure2 |
| 2026-03-23 | 1 | Disclosure1 |
CVE-2026-30694 An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component https://www.cve.org/CVERecord?id=CVE-2026-30694
Post summary
This is a disclosure that DedeCMS versions v.5.7.118 and earlier contain a remote code execution vulnerability via the array_filter component.
CVE-2026-30694 Remote Code Execution in DedeCMS v.5.7.118 via Array Filter Component https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30694
Post summary
The excerpt announces a Remote Code Execution vulnerability in DedeCMS v5.7.118, identifying the affected component but providing no PoC, exploit code, or evidence of active exploitation.
🚨 CVE-2026-30694: Remote code execution in DedeCMS (up to 5.7.118), no login required. Lock down your site and watch for a patch. Full advisory ➡️ https://volerion.com/vulnerabilities/CVE-2026-30694 #DedeCMS #infosec #AppSec
Post summary
The tweet reports a new remote code execution vulnerability in DedeCMS (CVE‑2026‑30694) affecting versions up to 5.7.118, noting no login is required and urging site owners to lock down their sites while awaiting a patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dedecms | dedecms | - | - | - |