Which versions of Sscms are affected by EUVD-2026-14294?

Organizations using A vulnerability should be aware of moderate risk from CVE-2026-4542, a path traversal vulnerability rated CVSS 5.4. This could allow unauthorized file access.

Is there a public PoC exploit available for EUVD-2026-14294?

Yes, a public proof-of-concept exploit is available for EUVD-2026-14294. Prioritise patching immediately. EPSS: 0.0%.

Sscms EUVD-2026-14294

Q: What is the CVSS score of EUVD-2026-14294?

EUVD-2026-14294 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-4542 LOW

Path Traversal (CWE-22)

2026-03-22 VulDB

Path Traversal Sscms

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

CVSS changed

Apr 18, 2026 - 05:22 NVD

5.4 (MEDIUM) 5.3 (MEDIUM)

PoC Detected

Mar 23, 2026 - 14:31 vuln.today

Public exploit code

EUVD ID Assigned

Mar 22, 2026 - 09:00 euvd

EUVD-2026-14294

Analysis Generated

Mar 22, 2026 - 09:00 vuln.today

CVE Published

Mar 22, 2026 - 08:35 nvd

MEDIUM 5.4

DescriptionCVE.org

A vulnerability has been found in SSCMS 4.7.0. The affected element is an unknown function of the file LayerImageController.Submit.cs of the component layerImage Endpoint. Such manipulation of the argument filePaths leads to path traversal. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

AnalysisAI

SSCMS 4.7.0's layerImage endpoint allows authenticated attackers to manipulate the filePaths parameter in LayerImageController.Submit.cs, enabling path traversal attacks that can modify or delete arbitrary files on the server. Public exploit code exists for this vulnerability, and no patch is currently available.

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment	While the CVSS score of 5.4 suggests medium severity, multiple factors elevate real-world risk: the vulnerability requires only low privileges (authenticated user, PR:L per CVSS vector), has low attack complexity (AC:L), and is remotely exploitable (AV:N). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An authenticated attacker with a valid SSCMS user account crafts an HTTP POST request to the layerImage endpoint, manipulating the filePaths parameter with a path traversal payload such as '../../../etc/passwd' or '..\..\..\windows\system32\config\sam' to read sensitive configuration or system files outside the intended upload directory. Alternatively, the attacker could attempt directory traversal combined with file write operations (if the endpoint permits) to achieve remote code execution by placing malicious files in executable directories. …
Remediation	Immediately upgrade SSCMS to the latest patched version released after 4.7.0; consult the official SSCMS repository or security mailing list for the specific patch version number and advisory details. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. …

Threat intelligence, references, and detailed analysis are available after sign-in.

EUVD-2026-14294 vulnerability details – vuln.today

Back