CVE-2026-94104 | NivoCart up to 2.4.0 File Manager multi chunks unrestricted upload

September 20, 2026 Yanac

A vulnerability has been found in NivoCart up to 2.4.0 and classified as critical. Affected is the function multi of the component File Manager. Performing a manipulation of the argument chunks results in unrestricted upload.

This vulnerability was named CVE-2026-94104. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More