CVE-2026-6797
Last modified
CVE-2026-6797 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vulnerability is the function ZipSecureFile.setMinflateRatio of the file common/src/main/java/com/publiccms/common/tools/DocToHtmlUtils.java. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d. Affected by this vulnerability is the function ZipSecureFile.setMinflateRatio of the file common/src/main/java/com/publiccms/common/tools/DocToHtmlUtils.java. Such manipulation leads to resource consumption. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-6797?
How severe is CVE-2026-6797?
How do I fix CVE-2026-6797?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-6791When expanding paths that begin with a tilde (~) followed by…6.6
- CVE-2026-6792Missing Authorization vulnerability in Universal Software In…6.5
- CVE-2026-6793Improper neutralization of input during web page generation …5.4
- CVE-2026-6795URL redirection to untrusted site ('open redirect') vulnerab…9.6
- CVE-2026-6796A vulnerability was determined in Sanluan PublicCMS up to 6.…5.3
- CVE-2026-67969An issue in the HS_MonitorApplications() component of NASA c…7.5
- CVE-2026-67970Incorrect access control in the DS_SetDestPathCmd() componen…7.5
- CVE-2026-67972An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.…7.5
- CVE-2026-67973An issue in the CFDP receive path of NASA cFS v7.0.1 allows …7.5
- CVE-2026-67974A parser boundary flaw in the Software Bus Network (SBN) app…7.5
- CVE-2026-67975Incorrect access control in NASA cFS v7.0.1 allows attackers…7.5
- CVE-2026-67976The Ref::SignalGen component of fprime framework v4.2.2 does…7.5
Are you affected by CVE-2026-6797?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST