Threats tagged 'ghsa-vf8x-qgg6-w422'

CVE-2026-119620 is a high-severity vulnerability in the cak-filemanagement-system affecting the move_uploaded_file function in admin/add_logs.php. It allows an attacker to perform unrestricted file uploads by manipulating the File argument remotely. The vulnerability has been publicly disclosed, but the project has not yet responded or issued a fix.