CVE-2026-92247

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-92247

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92247.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-92247

Published

2026-09-16T02:45:11Z

Modified

2026-09-18T03:31:03Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

Details

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.3.5 is able to mitigate this issue. It is suggested to upgrade the affected component.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-284",
        "CWE-434"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92247.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.3.4.0"
                },
                {
                    "last_affected": "1.3.4.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/synaptikcms/synaptik-cms

Affected ranges

Type

GIT

Repo

https://github.com/synaptikcms/synaptik-cms

Events

Introduced

62c774fa9481bbe7552d4d394846eec4dd50381f

Fixed

8da95eea8f842ffee7a4e80e5c07714e347a4c56

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "1.3.4.1"
        },
        {
            "last_affected": "1.3.4.1"
        },
        {
            "introduced": "1.3.4.2"
        },
        {
            "last_affected": "1.3.4.2"
        },
        {
            "introduced": "1.3.4.3"
        },
        {
            "last_affected": "1.3.4.3"
        },
        {
            "introduced": "1.3.4.4"
        },
        {
            "last_affected": "1.3.4.4"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.3.4.1

1.3.4.2

1.3.4.3

1.3.4.4

SynaptikCMS-v1.*

SynaptikCMS-v1.3.4.1

SynaptikCMS-v1.3.4.2

SynaptikCMS-v1.3.4.3

SynaptikCMS-v1.3.4.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92247.json"