What is CVE-2026-82598?

CVE-2026-82598 is a high-severity vulnerability in Seacms, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.3/10. Published 2026-08-31.

How severe is CVE-2026-82598?

High severity. CVSS v3 base score is 7.3 out of 10.

RCE in Seacms

CVE-2026-82598

A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the component Template Engine. This manipulation of the argument searchtype causes code injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

N/a Seacms — versions 13.0, 13.1, 13.2

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)

Frequently asked questions

What is CVE-2026-82598?: CVE-2026-82598 is a high-severity vulnerability in Seacms, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.3/10. Published 2026-08-31.
How severe is CVE-2026-82598?: High severity. CVSS v3 base score is 7.3 out of 10.