medium5.3
CVE-2026-1978
A vulnerability was detected in kalyan02 NanoCMS up to 0.4.
Impact
A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the file /data/pagesdata.txt of the component User Information Handler. Performing a manipulation results in direct request. It is possible to initiate the attack remotely. The exploit is now public and may be used. You should change the configuration settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kalyan02 | Nanocms | through 0.4 |