CVE-2026-78839

AppNitro MachForm v30 contains an arbitrary file upload vulnerability that enables remote code execution via a crafted .phar file. Successful exploitation requires two conditions: the attacker must identify (or configure) a form that permits .phar uploads, and must determine the MD5 hash assigned...