Security Advisory

CVE-2026-8739

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-05-17 07:45:12

Last updated 2026-05-18 20:09:22

Assigner VulDB

State PUBLISHED

Description

A vulnerability was detected in Sanluan PublicCMS 5.202506.d. The affected element is the function getSignKey of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java. The manipulation of the argument privatefile_key results in use of hard-coded cryptographic key . The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

← Browse all CVEs View on cve.org ↗