CVE-2026-117127

Severity not reported

Data quality: partial. Some fields were not provided by the source.

Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php

Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php

CVSS

—

Not reported by the source

Timeline (UTC)

Published: 2026-11-02 19:18

Modified: 2026-11-02 19:35

NVD status: Deferred

Last synced 1 day ago

Verified against the source API 2026-11-03 07:35 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

Not reported by the source (unknown — not "none").

Mitigation & advisories

No vendor advisory or patch reference tagged by NVD. Check the references below.

References

https://gist.github.com/hackerx-sk/ac89e49b001402db362414946985ee05 cve@mitre.org
https://github.com/gleez/cms cve@mitre.org
https://github.com/gleez/cms/blob/master/modules/gleez/classes/controller/media.php cve@mitre.org
https://gleezcms.org cve@mitre.org

Data sources

NVD CVE API 2.0 — fetched 2026-11-03 07:35 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores