Vulnerability Description
e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/e107inc/e107/commit/40b2d111
- https://github.com/e107inc/e107/commit/5f98cc9f
- https://github.com/e107inc/e107/security/advisories/GHSA-92fr-7h4f-22pp
- https://github.com/e107inc/e107/security/advisories/GHSA-92fr-7h4f-22pp
FAQ
What is CVE-2026-43936?
CVE-2026-43936 is a vulnerability with a CVSS score of 4.3 (MEDIUM). e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Me...
How severe is CVE-2026-43936?
CVE-2026-43936 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-43936?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.