A vulnerability was found in Sanluan PublicCMS 6.202506.d and classified as critical. This impacts the function
saveMetadata of the file TemplateCacheComponent.java of the component Template Cache Generation. Executing a manipulation can lead to path traversal.
This vulnerability is handled as CVE-2026-3289. The attack can be executed remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
