CVE-2026-22034

creationtimestamp| type| source ---|---|--- 2026-01-08 16:03:29+00:00| seen| Telegram/eK7Ikx8B4zhc3RXJcMY-EZtQzuwPO0YG4YMu0LZCUnsVEJo 2026-01-08 16:07:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwegzlc3t2e...

CVE-2026-22034

Summary: CVE-2026-22034 affects Snuffleupagus prior to v0.13.0 where enabling the non-default upload validation feature to use upstream VLD scripts, without the VLD extension available to the CLI SAPI, causes all files in multipart POST requests to be evaluated as PHP code. This can enable remote...