dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/lznlol/operation-log/blob/main/CVE-2025-65656.md Exploit, Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 9.8 · dcatadminNVD modified 2026-10-26 22:10
Affected (CPE criteria) 2
cpe:2.3:a:dcatadmin:dcat_admin:*:*:*:*:*:*:*:*cpe:2.3:a:dcatadmin:dcat_admin:*:beta:*:*:*:*:*:*
References 2
- https://github.com/jqhph/dcat-admin Product
- https://github.com/lznlol/operation-log/blob/main/CVE-2025-65656.md Exploit, Mitigation, Third Party Advisory