freo2 vulnerable to unrestricted upload of file with dangerous type

Overview freo2 provided by refirio is a content management system written in PHP. freo2 contains the following vulnerability. Unrestricted upload of file with dangerous type CWE-434 - CVE-2026-67243 Kazuki Ozawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/C...

CVE-2026-67243

creationtimestamp| type| source ---|---|--- 2026-08-04 04:45:03+00:00| seen| https://jvn.jp/en/jp/JVN52865575 2026-08-04 10:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3nwyslimqo2fr...