CVE-2026-108567 in icms2
Prediction
by VulDB Data Team • 10/10/2026
A vulnerability was found in <a href="/product/instantsoft:icms2">InstantSoft icms2 up to 2.18.2</a>. Impacted is the function <code>files_delete_file</code> of the file <em>system/fields/image.php</em> of the component <em>Image Handler</em>. Performing a manipulation of the argument <em>size</em> results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The patch is named <em>03d70937f1ff97031523222808726994b8b79379</em>. It is recommended to apply a patch to fix this issue.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.