CVE-2026-109397 - Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Space
CVE ID :CVE-2026-109397 Published : Oct. 12, 2026, 3:16 p.m. | 15 minutes ago Description :Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files by appending a trailing space to filenames....