Tag: File Upload Bypass

1 advisory tagged with "File Upload Bypass".

CVE-2026-35164 High

Unrestricted File Upload via CKEditor Endpoint

BraveCMS 2.0.0 contains an unrestricted file upload vulnerability in the CKEditor ckupload endpoint. Any authenticated user with at least Author privileges can upload an executable PHP file disguised as an image, then request it directly from the public web root to gain Remote Code Execution as the web server user.

BraveCMS Apr 2026

Start securing your codebase today

Connect your repositories and let AI agents handle continuous scanning, research, and triage.

Create free account Sign in

Have questions? Get in touch →

Tag: File Upload Bypass

Unrestricted File Upload via CKEditor Endpoint

Start securing your codebase today

Get the next advisory in your inbox