CVE-2026-82603 in SeaCMS

Prediction

by VulDB Data Team • 08/30/2026

A vulnerability was detected in SeaCMS up to 13.6. This issue affects some unknown processing of the file /member.php?action=del_pl of the component Comment Cache. The manipulation of the argument itype/vid results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-397105
• CPE: ready
• CWE: CWE-22 (confirmed)
• Exploit: Download
• CVSS: 5.4 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Lawfirm, Hostingprovider, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-82603
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-82603
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-82603/