CVE-2026-1978

A vulnerability was detected in kalyan02 NanoCMS up to 0.4. Affected by this issue is some unknown functionality of the file /data/pagesdata.txt of the component User Information Handler. Performing a manipulation results in direct request. It is possible to initiate the attack remotely. The exploit is now public and may be used. You should change the configuration settings.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cna@vuldb.com

Published

2026-02-06

Last modified

2026-02-23

Weaknesses

CWE-425

Affected products

• Nanocms (Kalyan02)

References

• https://github.com/kalyan02/NanoCMS/
• https://github.com/kalyan02/NanoCMS/blob/master/data/pagesdata.txt
• https://vuldb.com/?ctiid.344500
• https://vuldb.com/?id.344500
• https://vuldb.com/?submit.743260