CVE-2026-4044

The vulnerability CVE-2026-4044 affects projectsend up to r1945, specifically the realpath function in /import-orphans.php within the Delete Handler. Manipulating the files[] argument enables path traversal, enabling remote exploitation. The exploit is public; vendor was contacted but did not res...