CVE-2026-53698CWE-36

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set

Medium · published June 10, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00481 · 40.5th percentile
Weakness
CWE-36 · Absolute Path Traversal
Published
2026-06-10T00:00Z
EPSS history
Timeline
  • 10 JUN 00:00Z
    Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set
    cvelistv5