CVE-2026-72592 | dulldusk phpfm up to 1.8.0 upload_ext_filter unrestricted upload

August 10, 2026 Yanac

A vulnerability, which was classified as critical, was found in dulldusk phpfm up to 1.8.0. Affected by this issue is some unknown functionality. Such manipulation of the argument upload_ext_filter leads to unrestricted upload.

This vulnerability is referenced as CVE-2026-72592. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More