CVE-2026-94004

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used.

• CWE-74
• CWE-94

• https://vuldb.com/cve/CVE-2026-94004
• https://vuldb.com/submit/944743
• https://vuldb.com/vuln/407953
• https://vuldb.com/vuln/407953/cti

Published

Sep 20, 2026

Last Modified

Sep 20, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-93997A weakness has been identified in SourceCodester Drug Recomm…7.3
• CVE-2026-93999A flaw was found in the OIDC protocol implementation of Keyc…4.2
• CVE-2026-9400A flaw has been found in Edimax BR-6675nD 1.12. This issue a…6.3
• CVE-2026-94000A flaw was found in the Admin REST API of Keycloak, an open-…6.6
• CVE-2026-94001A flaw was found in the Admin REST API of Keycloak, an open-…6.5
• CVE-2026-94003A vulnerability has been found in Comfast CF-N1-S 2.6.0.1. I…10
• CVE-2026-9401A vulnerability has been found in Edimax BR-6675nD 1.12. Imp…8.8
• CVE-2026-9402A vulnerability was found in Edimax BR-6675nD 1.12. The affe…6.3
• CVE-2026-9403A vulnerability was determined in Edimax BR-6675nD 1.12. The…8.8
• CVE-2026-9404A vulnerability was identified in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-9405A security flaw has been discovered in Totolink A8000RU 7.1c…9.8
• CVE-2026-94054Exim before 4.100.1, when Proxy-Protocol is used with an att…7