CVE-2026-124499 | Fengoffice Feng Office up to 3.11.13.11/4.2.1.2 Translation Tool ToolController.class.php write_translations lang code injection

SecurityVulns
Yanac

A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. It has been rated as problematic. This affects the function write_translations of the file application/controllers/ToolController.class.php of the component Translation Tool. The manipulation of the argument lang leads to code injection.

This vulnerability is listed as CVE-2026-124499. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More