HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-114262 — A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to delive

Analysis

A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.php. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet. CVSS Score: 7.3. Published: 2026-10-21T18:17:26.767.

Indicators of Compromise (2)

SHA-1 (1)
dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df
VirusTotalAnyRunJoe Sandbox
CVE (1)
CVE-2026-114262
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 21, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

CISO Problems That Can't Be Solved With Technology

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ciso-problems-that-cant-be-solved-technology-image_small-4-a-33248.jpg" align=right hspace=4><b>Operational Struggles and Arrogant Vendors Mean Tool Churn Is Likely to Continue</b><br>No matter how advanced or powerful cybersecurity tools become, they will never be able to fix many of the key problems that confront cyber defenders

Bank Info Security
LOWAi

Fake Anthropic AI previews lure in overeager employees

Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. New research from cybersecurity company Cofense describes a phishing campaign that hooks overeager enterprise users by making them think they are getting an invite to a private invite-only Anthropic preview. In reality, adversarial actors are trying to steal Google and Microsoft login credentials, exploi

CSO Online
MEDIUMVulnerability

Monzo launches in Spain

British digital bank has officially launched in Spain, marking its first move onto continental Europe.

Finextra