CVE-2026-93506

A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called 05b4f9efeb79e9d72a693232334d7529687f896f. It is best practice to apply a patch to resolve this issue.

• CWE-918

• https://github.com/SveltyCMS/SveltyCMS/
• https://github.com/SveltyCMS/SveltyCMS/commit/05b4f9efeb79e9d72a693232334d7529687f896f
• https://vuldb.com/cve/CVE-2026-93506
• https://vuldb.com/submit/942851
• https://vuldb.com/vuln/407423
• https://vuldb.com/vuln/407423/cti

Published

Sep 18, 2026

Last Modified

Sep 18, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93492A flaw was found in Netty's HTTP/2 HpackEncoder. A remote at…5.3
• CVE-2026-93493A flaw was found in Netty's `netty-handler-ssl-ocsp` compone…5.9
• CVE-2026-93494A flaw was found in Netty's StompSubframeDecoder component. …7.5
• CVE-2026-9350A vulnerability was identified in NousResearch hermes-agent …7.3
• CVE-2026-93504A vulnerability has been found in SveltyCMS 0.0.6. This affe…6.3
• CVE-2026-93505A vulnerability was found in SveltyCMS 0.0.6. This vulnerabi…3.5
• CVE-2026-9351A security flaw has been discovered in NousResearch hermes-a…6.5
• CVE-2026-9352A weakness has been identified in NousResearch hermes-agent …5.5
• CVE-2026-9353A security vulnerability has been detected in NousResearch h…7.3
• CVE-2026-93531A weakness has been identified in gedelumbung HospitalManage…4.3
• CVE-2026-93532A security vulnerability has been detected in gedelumbung Ho…6.3
• CVE-2026-93533A vulnerability was determined in spatie Scotty up to 1.4.4.…6.3