CVE-2026-88621 | helloxz OneNav 1.2.4 class/Api.php Api::upload unrestricted upload

A vulnerability categorized as problematic has been discovered in helloxz OneNav 1.2.4. The impacted element is the function Api::upload of the file class/Api.php. Executing a manipulation can lead to unrestricted upload.

This vulnerability is handled as CVE-2026-88621. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More