CVE-2026-92263 | CodeWithCJ SparkyFitness up to 1.5.x Backup/Restore api/admin/backup/restore os command injection

October 16, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in CodeWithCJ SparkyFitness up to 1.5.x. This impacts an unknown function of the file api/admin/backup/restore of the component Backup/Restore. The manipulation leads to os command injection.

This vulnerability is documented as CVE-2026-92263. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More