CVE-2026-39904

creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/188216 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/188218 2026-09-02 01:00:21+00:00| published-proof-of-concept| https://t.me/hackingAttack/188216 2026-09-02 01:00:22+00:00|...

CVE-2026-39904

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate function in models/attachment.go processes Office documents as ZI...