VulnSocial

CVE-2026-93506Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called 05b4f9efeb79e9d72a693232334d7529687f896f. It is best practice to apply a patch to resolve this issue.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-18); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-18: 1Mentions · 2026-09-19: 109-1809-19
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-181
Disclosure1
2026-09-191
General1
Full discourse2 posts
  • Harrison.Wells@L33tH4xcyber
    General

    I am now recognized as the finder of 4 CVE's: CVE-2026-93371 CVE-2026-93504 CVE-2026-93505 CVE-2026-93506 Overall, this exercise has completely reinforced my belief that we should abolish this idiotic process and standard, but you bet your ass I'll be putting it on my resume.

    Post summary

    The text only lists four CVE IDs and the author's frustration with the disclosure process, without providing PoC, exploit, active exploitation, patch, or technical vulnerability details.

    200110373
    146 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-93506 A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endp… https://www.cve.org/CVERecord?id=CVE-2026-93506

    Post summary

    The text is an initial CVE disclosure for SveltyCMS 0.0.6 affecting the /mediagallery/upload-media File Upload Endpoint. It does not provide PoC, exploit tooling, active exploitation, or patch information.

    000001.2K
    58.1K followersView on X

Explore more

Back to dashboard