CVE-2026-71620

A File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code by uploading a crafted .php file. The root cause is insufficient validation of uploaded file types in the file upload functionality, enabling code execution on the server. No specific pa...