Live › vulnerability › CVE-2026-117127
GleezCMS 1.2.0 has a directory traversal flaw in the action_serve function of media.php. A remote attacker can use it to read sensitive files on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 19:24 UTC. All times on this page are UTC.
Sites running GleezCMS version 1.2.0 with the media.php file exposed are affected. The sources do not state the exact request conditions or whether a login is needed, so exposure beyond the stated version is unknown.
No product ranges from the sources yet.
1.2.0.action_serve in media.php of the installed copy.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php
This page as .md · .json · in your agent: get_signal("CVE-2026-117127")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.