CVE-2026-76783 is a SQL injection vulnerability affecting DeDeCMS 53_1_UTF8. The vulnerability exists in the /plus/advancedsearch.php file where the 'sql' parameter can be manipulated remotely without authentication to inject SQL commands. This can lead to unauthorized data access or modification. The CVSS 4.0 base score is 6.9, reflecting network attack vector, low complexity, no privileges required, and no user interaction needed. No official remediation or patch has been published as of the current data.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the affected DeDeCMS database. This may result in unauthorized data disclosure, data modification, or other impacts depending on the database privileges. However, no active exploitation in the wild has been confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict access to the vulnerable endpoint if possible and monitor for suspicious activity related to SQL injection attempts targeting /plus/advancedsearch.php.