Threat database

CVE-2026-116057 is a medium severity vulnerability in KodCloud KodExplorer up to version 4.19. It involves an unrestricted file upload issue in the Online Editor Save Endpoint component, specifically in the file app/controller/editor.class.php. This vulnerability allows remote attackers to upload files without proper restrictions by manipulating the path/filestr argument. The exploit has been publicly disclosed, but the vendor has not responded or provided a fix.