CVE-2026-27202CWE-22CWE-23

GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability

High · published February 20, 2026

CVSS v4.0
8.8
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature that allows for arbitrary file reads. This issue has not been fixed at the time of publication.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00603 · 48.2th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-23 · Relative Path Traversal
Published
2026-02-20T23:26Z
EPSS history
Timeline
  • 20 FEB 23:26Z
    GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability
    cvelistv5