CVE-2026-116057 | KodCloud KodExplorer up to 4.55 Online Editor Save Endpoint editor.class.php path/filestr unrestricted upload

October 24, 2026 Yanac

A vulnerability categorized as critical has been discovered in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload.

This vulnerability is referenced as CVE-2026-116057. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More