{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cveId":"CVE-2026-117127","cwes":[],"description":"Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action_serve function in media.php","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793646011049,"publishedAt":1793577600000,"references":[{"source":"CNA: mitre","tags":[],"url":"https://github.com/gleez/cms"},{"source":"CNA: mitre","tags":[],"url":"https://gleezcms.org/"},{"source":"CNA: mitre","tags":[],"url":"https://github.com/gleez/cms/blob/master/modules/gleez/classes/controller/media.php"},{"source":"CNA: mitre","tags":[],"url":"https://gist.github.com/hackerx-sk/ac89e49b001402db362414946985ee05"}],"remediation":[],"revision":"bc7d95faacd6d4036f9f9f69239c965ac015e062105420642714bdaad8df9b78","sources":[{"modifiedAt":1793646011049,"name":"CNA: mitre","retrievedAt":1793646538791,"url":"https://www.cve.org/CVERecord?id=CVE-2026-117127"}],"ssvc":null,"status":"published","title":"CVE-2026-117127","updatedAt":1793646538791}