{"id":"CVE-2026-56660","published":"2026-10-01T20:17:26.643","lastModified":"2026-10-01T20:23:46.493","description":"GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads a ZIP archive and extracts its contents into the web root without validating file types or extraction paths. Because PHP files are written into a web-accessible directory, an attacker who can cause a malicious archive to be processed achieves remote code execution as the web-server user. Entry names are also used unsafely, allowing directory traversal (../) to write files outside the intended extraction directory. This issue has been patched in version 1.5.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-352","CWE-434","CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-q5rx-gppg-768r","tags":[]},{"url":"https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-q5rx-gppg-768r","tags":[]}],"exploitRefs":[{"url":"https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-q5rx-gppg-768r","tags":[]},{"url":"https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-q5rx-gppg-768r","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows an attacker to execute arbitrary code by processing a malicious ZIP archive, leading to remote code execution (RCE) as the web-server user.","exploitability":"Exploitation is relatively easy if an attacker can cause a malicious archive to be processed, such as through a vulnerable plugin or user input.","blast_radius":"If exploited, the impact could be severe, as it allows full control over the web application and potentially the underlying server.","remediation":"Upgrade to GetSimple CMS version 1.5 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","cms","zip","exploit"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:46:57.902Z"}}