CVE-2026-124623 | PipraPay 3.0.0 ZIP Archive system-settings-import unrestricted upload (Issue 68)

November 9, 2026 Yanac

A vulnerability classified as problematic has been found in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in unrestricted upload.

This vulnerability is reported as CVE-2026-124623. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More