CVE-2026-115188

An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without restricting their file names or types. An authenticated user...

EUVD-2026-109791

An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without restricting their file names or types. An authenticated user...

CVE-2026-115188

The campaign import feature in Mautic 7 is vulnerable to an unrestricted file upload (CWE-434, CWE-94). When processing uploaded campaign archives, the application copies bundled asset files into a publicly accessible media directory without validating file names or types. An authenticated user w...