CVE-2026-126372

Vvveb versions through 1.0.8.6 are affected by a template upload bypass due to an incomplete fix for CVE-2026-41934. Authenticated users with editor or site_admin privileges can write server-side templates by bypassing save restrictions. Specifically, attackers can upload or rename .tpl files via...