Vulnerability Description
Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability exists in the CKEditor upload functionality. It is found in app/Http/Controllers/Dashboard/CkEditorController.php within the ckupload method. The method fails to validate uploaded file types and relies entirely on user input. This allows an authenticated user to upload executable PHP scripts and gain Remote Code Execution. This vulnerability is fixed in 2.0.6.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ajax30 | Bravecms | >= 2.0.0, < 2.0.6 |
Related Weaknesses (CWE)
References
- https://github.com/Ajax30/BraveCMS-2.0/security/advisories/GHSA-2j4q-6p52-4rhwExploitVendor Advisory
- https://github.com/Ajax30/BraveCMS-2.0/security/advisories/GHSA-2j4q-6p52-4rhwExploitVendor Advisory
FAQ
What is CVE-2026-35164?
CVE-2026-35164 is a vulnerability with a CVSS score of 8.8 (HIGH). Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestricted file upload vulnerability exists in the CKEditor upload functionality. It is found in app/Http/Controllers/Dashboard/CkEditorController...
How severe is CVE-2026-35164?
CVE-2026-35164 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35164?
Check the references section above for vendor advisories and patch information. Affected products include: Ajax30 Bravecms.