CVE-2026-5695— Multiple vulnerabilities in the Microweber administration panel
Quick assessment
Affected
Microweber Administration panel
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without restrictions. An attacker could exploit this flaw to execute malicious code remotely (demonstrated by
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-5695
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple vulnerabilities in the Microweber administration panel
Source: CVE Program / CVE List V5
Vulnerability Description
Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without restrictions. An attacker could exploit this flaw to execute malicious code remotely (demonstrated by uploading the EICAR test file), which could result in the system being completely compromised.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
危险类型文件的不加限制上传
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microweber | Administration panel | 2.0.19 | - |
|
II. Public POCs for CVE-2026-5695
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-5695
请登录查看更多情报信息。
Other References for CVE-2026-5695 (1)
IV. Related Vulnerabilities
Same product: Administration panel
Same vendor: Microweber
-
CVE-2026-5696
Multiple vulnerabilities in the Microweber administration pa -
CVE-2026-67617
Microweber CMS 2.0.20 Stored XSS via tag_names Parameter -
CVE-2026-65693
Microweber CMS 2.0.20 Server-Side Template Injection via Mai -
CVE-2026-65694
Microweber CMS 2.0.20 Path Traversal via ServeStaticFileCont -
CVE-2024-58289
Microweber 2.0.15 Stored Cross-Site Scripting via User Profi
Same weakness: CWE-434
-
CVE-2026-96513
Neethuharii CafeManagement AddProductCode.php unrestricted u -
CVE-2026-95830
theRealSain Pixtream post_upload.php unrestricted upload -
CVE-2026-95820
anirbandutta9 College-Notes-Gallery userprofile.php admin1 u -
CVE-2026-95500
JosephChuks php-file-manager-with-code-editor Save codeEdito -
CVE-2026-95499
JosephChuks php-file-manager-with-code-editor filemanager.ph
V. Comments for CVE-2026-5695
No comments yet