CVE-2026-78140— Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
Quick assessment
Affected
Dromara UJCMS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Dromara UJCMS 最高版本 10.1.3 中发现了一个缺陷。受影响的元素是组件 web-file-template 端点的文件 的 函数。执行操纵行为可能导致模板引擎中使用的特殊元素无法被正确中和。该漏洞可被远程利用，相关 exploit 代码已公开，可能被攻击者使用。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78140
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been published and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1336
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-78140
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78140
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-78140 (2)
News Coverage for CVE-2026-78140 (1)
Other References for CVE-2026-78140 (1)
-
🔗 CVE-2026-78140 in UJCMS third-party-advisory
IV. Related Vulnerabilities
Same product: UJCMS
-
CVE-2026-2954
Dromara UJCMS ImportDataController import-channel importChan -
CVE-2026-2953
Dromara UJCMS Template WebFileTemplateController.delete dele -
CVE-2025-2491
Dromara ujcms Edit Template File Page WebFileTemplateControl -
CVE-2025-2490
Dromara ujcms File Upload WebFileUploadController.java uploa -
CVE-2024-12483
Dromara UJCMS User ID id authorization
Same vendor: Dromara
-
CVE-2026-77795
Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController -
CVE-2026-19758
dromara lamp-cloud chunk-check endpoint FileChunkController. -
CVE-2026-19757
Dromara lamp-cloud File-Upload Controller FileAnyoneControll -
CVE-2026-19756
Dromara lamp-cloud Code Generator DefGenProjectController.ja -
CVE-2026-69102
MaxKey Hard-coded JWT Secret Unauthorized Access via /login/
Same weakness: CWE-1336
-
CVE-2026-77129
Server-Side Template Injection in extension "Event managemen -
CVE-2026-77136
Server-Side Template Injection in extension "powermail" (pow -
CVE-2026-75574
Grav before 4.2.2 Remote Code Execution via Email Twig -
CVE-2026-72716
Orval: Import-time RCE via query-parameter default -> zod mo -
CVE-2026-52889
Formie: Server-Side Template Injection in Formie Hidden fiel
V. Comments for CVE-2026-78140
No comments yet