CVE ID :CVE-2026-104069 Published : Oct. 6, 2026, 3:17 p.m. | 2 hours, 11 minutes ago Description :HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly into the public web root before any...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-104069 - HortusFox < 6.2 Remote Code Execution via Theme Import

VERWANDTEARTIKEL

Atlassian warns of critical file-access flaw in Jira, Confluence

CVE-2026-105865 - Payload: Incomplete validation during the upload file lifecycle

CVE-2026-105862 - Payload: Bypassed sanitization of user uploaded SVGs

CVE-2026-106218 - JetBrains TeamCity Kotlin DSL Sandbox Escape Remote Code Execution

CVE-2026-105859 - Payload: Unauthorized update to collection documents

CVE-2026-105858 - Payload: Remote Code Execution through first-register