What’s Vulnerable › Vulnerabilities

CVE-2026-67206: Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-07-30 · updated 2026-07-31
• Weakness: CWE-434

Description

Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController that allows authenticated attackers to create arbitrary PHP files by exploiting missing file extension validation in the create_file() and save() functions. Attackers with the file_manager_mkfile capability can write malicious PHP content into the web-accessible FILES_DIR directory and trigger execution by requesting the file over HTTP.

Affected products

• wolfcms: all versions

References

• https://github.com/Caycon/cve-advisories/blob/main/2026/WolfCms/CVE-2026-67206.md
• https://www.vulncheck.com/advisories/wolf-cms-authenticated-rce-via-filemanagercontroller-file-upload

Get alerted when CVE-2026-67206 or the next vulnerability affects your stack