CVE-2026-19376

Uasoft Badaso 3.0.0-alpha is affected. The vulnerability targets the ApiRequest::class in the file src/Routes/api.php of the File API, causing permission issues. It can be exploited remotely, and the exploit has been disclosed publicly. The project was informed via an issue report but has not res...