CVE-2026-51078 is an information disclosure vulnerability in Dede CMS v5.7.118. The flaw exists in the file_manage_control.php component's 'str' parameter, which can be manipulated by a remote attacker to retrieve sensitive data. The vulnerability has a CVSS 3.1 base score vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact without affecting integrity or availability. No patch or official remediation has been documented in the provided data.

Successful exploitation allows a remote attacker to obtain sensitive information from the affected system, potentially leading to further attacks or data breaches. The confidentiality of the system is compromised, but integrity and availability remain unaffected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable component and monitor for suspicious activity related to the 'str' parameter in file_manage_control.php requests.