TI-2026-50861 Aliases CVE-2026-72604 GHSA-fgfw-7r72-25m2

Intelliants Subrion CMS - Path Traversal

LOW 29CWE-22Published 2026-08-11 · Updated 2026-08-11

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink() without sanitization or path canonicalization. An authenticated administrator can delete sensitive system files outside the web root, potentially causing server instability or facilitating further attacks.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00517 44th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Intelliants	Subrion CMS	up to 4.2.1	—	No fix listed	CNA

Subrion CMS VendorIntelliants Affected up to 4.2.1 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2026-72604
2026-10-03 Alias added: GHSA-fgfw-7r72-25m2

References

Other 1

Project Repository

TI-2024-16725 Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. CVSS 3.1CRITICAL 9.8
TI-2023-25347 Subrion 4.2.1 has a remote command execution vulnerability in the backend. CVSS 3.1HIGH 8.8
TI-2026-63862 Intelliants Subrion CMS actions.json assign-owner information disclosure CVSS 4.0MEDIUM 6.9
TI-2018-13753 /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code… CVSS 3.1HIGH 7.2
TI-2026-63863 Intelliants Subrion CMS Login Page login.php authorize redirect CVSS 4.0MEDIUM 5.3
TI-2025-43172 Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module… CVSS 3.1MEDIUM 6.1

See all 69 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences