PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-35047 Ajax30 CVE debrief

The Brave CMS, prior to version 2.0.6, contains an Unrestricted File Upload vulnerability in the CKEditor endpoint. This allows attackers to upload arbitrary files, including executable scripts, potentially leading to Remote Code Execution (RCE) on the server. The vulnerability impacts users running affected versions of Brave CMS. Defenders and administrators should assess exposure and apply patches to prevent potential RCE. The CVE record was published on 2026-04-06T18:16:42.433Z and has not been modified since then. This vulnerability is fixed in version 2.0.6.

Vendor
Ajax30
Product
BraveCMS-2.0
CVSS
CRITICAL 9.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-06
Original CVE updated
2026-10-23
Advisory published
2026-04-06
Advisory updated
2026-10-23

Who should care

Defenders and administrators of Brave CMS systems should assess exposure and apply patches to prevent potential Remote Code Execution. This includes verifying Brave CMS version, checking for exposure to CVE-2026-35047, and monitoring systems for suspicious activity related to file uploads. Security teams and operators should prioritize verifying exposure and applying patches for Brave CMS versions prior to 2.0.6. Platform and vulnerability-management teams

Why it matters

Defenders should prioritize verifying exposure and applying patches for Brave CMS versions prior to 2.0.6, as an Unrestricted File Upload vulnerability allows for potential Remote Code Execution, which could lead to full system compromise, data exfiltration, or service disruption.

  • Potential Remote Code Execution on the server
  • Full system compromise or data exfiltration
  • Service disruption due to malicious file uploads

Technical summary

The Unrestricted File Upload vulnerability in Brave CMS, prior to version 2.0.6, allows attackers to upload arbitrary files, including executable scripts, potentially leading to Remote Code Execution on the server. This vulnerability is fixed in version 2.0.6. The CVE record and NVD detail page provide information on the vulnerability. Defenders should prioritize verifying exposure and applying patches for Brave CMS versions prior to 2.0.6. The vulnerability may lead to full system compromise, data exfiltration, or service disruption.

Defensive priority

Defenders should prioritize verifying exposure and applying patches for Brave CMS versions prior to 2.0.6, as an Unrestricted File Upload vulnerability allows for potential Remote Code Execution.

Recommended defensive actions

  • Verify Brave CMS version and check for exposure to CVE-2026-35047
  • Apply patches or updates to Brave CMS to prevent potential Remote Code Execution
  • Monitor systems for suspicious activity related to file uploads
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD detail page provide information on the Unrestricted File Upload vulnerability in Brave CMS, which could lead to Remote Code Execution. The vendor has released a patch in version 2.0.6.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-35047 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-35047

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-35047 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-35047

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.