CVE-2026-48820

CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.2.12, and 5.3.0 through 5.3.5, View::_getElementFileName() does not check that the resolved element path is within the application/plugin view template paths. When element names are created with specifically crafted user-supplied data this weakness can be leveraged to include other PHP files on the server. Patched releases are available in 5.3.6, 5.2.13, 5.1.7, 4.6.4, and 4.5.11.

• CWE-22
• CWE-98

• https://github.com/cakephp/cakephp/security/advisories/GHSA-wpvj-hjcr-h3p2

Published

Jun 17, 2026

Last Modified

Jun 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48815sigstore-js provides JavaScript libraries for interacting wi…7.5
• CVE-2026-48816sigstore-js provides JavaScript libraries for interacting wi…6.5
• CVE-2026-48817Starlette is a lightweight ASGI framework/toolkit. In versio…5.3
• CVE-2026-48818Starlette is a lightweight ASGI framework/toolkit. In versio…7.5
• CVE-2026-48819Hey API is an ecosystem for turning API specifications into …4.8
• CVE-2026-4882The User Registration Advanced Fields plugin for WordPress i…9.8
• CVE-2026-48821Shaarli is a personal bookmarking service. Versions 0.16.1 a…5.8
• CVE-2026-48822Shaarli is a personal bookmarking service. Versions 0.16.1 a…5.8
• CVE-2026-48823Shaarli is a personal bookmarking service. Versions 0.16.1 a…4.8
• CVE-2026-48824Mailpit is an email testing tool and API for developers. Pri…5.3
• CVE-2026-48826HomeBox is a home inventory and organization system. Prior t…8.1
• CVE-2026-48827Path traversal vulnerability in Apache MINA SSHD bundle sshd…7.1