Liufee

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-95265

    Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addresses, allowing an attacker to make the server probe internal HTTP services through response differences.

    Last Modified: Oct 07, 2026
    Published: Oct 05, 2026

    CVE-2026-95263

    Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super administrator account. The server does not enforce protection for this account, and the update scenario does not require the old password.

    Last Modified: Oct 09, 2026
    Published: Oct 05, 2026

    CVE-2026-95264

    Directory Traversal Allowing Arbitrary File Deletion in Feehi CMS 2.1.1

    Last Modified: Oct 09, 2026
    Published: Oct 05, 2026

    CVE-2026-86241

    liufee FeehiCMS Cookie Validation main-local.php hard-coded key

    Last Modified: Sep 11, 2026
    Published: Sep 07, 2026

    CVE-2026-86240

    liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

    Last Modified: Sep 08, 2026
    Published: Sep 07, 2026
    Items Per Page
    Liufee Vulnerabilities & Security CVEs | CVE-DB