CVE-2026-86347 MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile because the ACL entry for templates/uploadFile used the wildcard . This bypasses the intended role restrictions applied to neighboring template-management operations. The upload handler accepts...

CVE-2026-86347 MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile because the ACL entry for templates/uploadFile used the wildcard . This bypasses the intended role restrictions applied to neighboring template-management operations. The upload handler accepts...

CVE-2025-51650

An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2.6 allows attackers to execute arbitrary code via uploading a crafted template file...

CVE-2025-51650

An arbitrary file upload vulnerability in the component /controller/PicManager.php of FoxCMS v1.2.6 allows attackers to execute arbitrary code via uploading a crafted template file...

YMBCMS management system template file upload vulnerability

Hebei OuRunTianTeng Science and Technology Development Co., Ltd. is an Internet enterprise focusing on the development of five stations in one "computer website + mobile website + WeChat public platform + APP + small program" service for enterprises. YMBCMS management system template file upload...

Eyoucms children's clothing foreign trade responsive English website template file upload vulnerability

Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. Eyoucms children's clothing responsive English website template file upload vulnerability...