CVE-2026-120642 | Leejo CGI up to 4.x lib/CGI.pm uploadInfo/script_name/cookie access control

A vulnerability classified as critical was found in Leejo CGI up to 4.x. The affected element is an unknown function of the file lib/CGI.pm. The manipulation of the argument uploadInfo/script_name/cookie results in improper access controls.

This vulnerability is known as CVE-2026-120642. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More