CVE-2026-120647 | LEEJO CGI up to 4.x Content-Disposition lib/CGI.pm header name injection

November 4, 2026 Yanac

A vulnerability was found in LEEJO CGI up to 4.x and classified as critical. Affected is the function header of the file lib/CGI.pm of the component Content-Disposition. Executing a manipulation of the argument Name can lead to injection.

The identification of this vulnerability is CVE-2026-120647. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More