CVE-2026-8211 | codelibs Fess up to 15.5.1 JSP File AdminDesignAction.java update content code injection

A vulnerability classified as critical was found in codelibs Fess up to 15.5.1. Affected by this issue is the function update of the file org/codelibs/fess/app/web/admin/design/AdminDesignAction.java of the component JSP File Handler. The manipulation of the argument content results in code injection.

This vulnerability was named CVE-2026-8211. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.