CVE-2026-29597 in DDSN Interactive Acora CMS
Summary
Incorrect access control in the file_details.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allows attackers with editor privileges to access sensitive files via crafted requests.
Responsible
MITRE
Reservation
03/04/2026
Disclosure
03/30/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354218 | DDSN Interactive Acora CMS file_details.asp access control | 284 | Not defined | Not defined | CVE-2026-29597 |