synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

published 2026-09-16 54 d ago modified 2026-09-16 53 d ago also EUVD-2026-80091

cvss: 4.7; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 34%
public exploits: 0; none known

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.3.5 is able to mitigate this issue. It is suggested to upgrade the affected component.

Patch / fix

fixed in 1 links 1

synaptikcms synaptik-cms 1.3.5

github.com/synaptikcms/synaptik-cms/releases/tag/v1.3.5 release

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 53 d ago (2026-09-16)

Exploit prediction

0.40% chance of exploitation in the next 30 days, higher than 34% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

github.com https://github.com/d1n3sh-0x3/synaptikcms-security-research referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	4.0	5.1	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CNA	3.1	4.7	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CNA	3.0	4.7	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CNA	2.0	5.8	AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C
CNA	4.0	2.0	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CNA	3.1	4.7	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CNA	2.0	5.8	AV:N/AC:L/Au:M/C:P/I:P/A:P

Affected products

synaptikcms synaptik-cms

Classification

Weakness

CWE-434 Unrestricted Upload of File with Dangerous Type
CWE-284 Improper Access Control

References

github.com /synaptikcms/synaptik-cms/releases/tag/v1.3.5
patch
github.com /d1n3sh-0x3/synaptikcms-security-research
exploit
vuldb.com /vuln/404682
vdb-entry, technical-description
vuldb.com /vuln/404682/cti
signature, permissions-required
vuldb.com /cve/CVE-2026-92247
third-party-advisory
vuldb.com /submit/934183
third-party-advisory

Sources

CVE List CVE-2026-92247
NVD CVE-2026-92247

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary