CVE-2026-71624

esoTalk v1.0.0g4 is vulnerable to remote code execution via a Configuration Comment Injection flaw, as indicated by the advisory reference. The attack targets the ETMemberModel.class.php, ETMemberController.class.php, and ET.class.php components, requiring no authentication or user interaction . ...