CVE-2026-108963 | David-Crty databasement up to 1.8.1 /app/public/index.php os command injection

October 11, 2026 Yanac

A vulnerability identified as critical has been detected in David-Crty databasement up to 1.8.1. Affected is an unknown function of the file /app/public/index.php. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2026-108963. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More