CVE-2026-124500

A security flaw in Fengoffice Feng Office (up to versions 3.11.13.11/4.2.1.2) allows for server-side request forgery (SSRF) . The vulnerability exists within the File Handler component, specifically in the upload_document_image function of the application/controllers/FilesController.class.php fil...