CVE-2026-28507
Idno is a social publishing platform.
Published Mar 6, 2026 · updated Jun 17, 2026 · withknown known
Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 6, 2026 · NIST NVD
Detected
Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.
Jun 17, 2026 · NIST NVD
Updated
Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.
Affected
- cpe withknown/knownversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-28507
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28507
Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.
nvd.nist.gov