CVE-2026-48062 | codeigniter4 CodeIgniter up to 4.7.2 File Extension Validator FileRules.php unrestricted upload

July 17, 2026 Yanac

A vulnerability described as critical has been identified in codeigniter4 CodeIgniter up to 4.7.2. Affected is an unknown function of the file system/Validation/StrictRules/FileRules.php of the component File Extension Validator. Executing a manipulation can lead to unrestricted upload.

This vulnerability is tracked as CVE-2026-48062. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More