Findings

CVE-2026-28507

Idno is a social publishing platform.

Published Mar 6, 2026 · updated Jun 17, 2026 · withknown known

Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 6, 2026 · NIST NVD

    Detected

    Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.

Affected

  • cpe withknown/knownversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-28507

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-28507

    Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.

    nvd.nist.gov

References