CVE-2026-102249 | REBUILD up to 4.4.11 file-editor-save url/fileKey authorization

September 28, 2026 Yanac

A vulnerability described as critical has been identified in REBUILD up to 4.4.11. This vulnerability affects unknown code of the file /commons/file-editor-save. The manipulation of the argument url/fileKey results in missing authorization.

This vulnerability is known as CVE-2026-102249. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More