Low severity · published Mar 16, 2026
CVE-2026-4222
SSCMS download PathUtils.RemoveParentPath path traversal
3.8
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was determined in SSCMS up to 7.4.0. This vulnerability affects the function PathUtils.RemoveParentPath of the file /api/admin/plugins/install/actions/download. This manipulation of the argument path causes path traversal. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
SSCMS · Sscms
7.0; 7.1; 7.2; 7.3; 7.4.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4222
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4222
vuldb.com
https://vuldb.com/?ctiid.351146
vuldb.com
https://vuldb.com/?id.351146
vuldb.com
https://vuldb.com/?submit.770536
www.yuque.com
https://www.yuque.com/la12138/pa2fpb/mbcvbk402bx1qbft?singleDoc
More from SSCMS
6.5
CVE-2025-52237
An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal
6.3
CVE-2026-4234
SSCMS DDL SitesAddController.Submit.cs sql injection
5.4
CVE-2026-4542
SSCMS layerImage Endpoint LayerImageController.Submit.cs path traversal
5.4
CVE-2023-43953
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component
5.0
CVE-2026-82486
SiteServer SSCMS Agent Installation Workflow access control