CVE-2026-108688 | elunez eladmin up to 2.7 LocalStorageController pictures uploadPicture improper authorization

October 11, 2026 Yanac

A vulnerability classified as critical has been found in elunez eladmin up to 2.7. This vulnerability affects the function uploadPicture of the file /api/localStorage/pictures of the component LocalStorageController. This manipulation causes improper authorization.

This vulnerability is registered as CVE-2026-108688. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More