CVE-2023-26546

—

CVSS 3.1

8.8 high

EPSS

1%p72

Published

May 2, 2023 (May 2, 2023)

Modified

Jun 17, 2026

Description

European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file. The attacker must have template manager permission.

Vendors: echa.europa
Products: iuclid
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.