CVE-2026-4809

creationtimestamp| type| source ---|---|--- 2026-03-26 14:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxrgxrhl225 2026-03-26 21:00:18+00:00| seen| https://infosec.exchange/users/offseq/statuses/116297486638382284 2026-03-26 21:00:19+00:00| seen|...

CVE-2026-4809

Brand-new CVE entry CVE-2026-4809 affects plank/laravel-mediable up to version 6.4.0. In vulnerable configurations that accept a client-supplied MIME type during file upload, an attacker can submit a file containing executable PHP code while declaring a benign image MIME type, enabling arbitrary ...