CVE-2026-116255 | PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990 URI Sanitizer doc.php _detail uri_string path traversal

October 25, 2026 Yanac

A vulnerability was found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. It has been rated as problematic. Affected is the function _detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uri_string leads to path traversal.

This vulnerability is listed as CVE-2026-116255. The attack may be initiated remotely. In addition, an exploit is available.

This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More