CVE-2026-120646 | CGI up to 4.99 Upload lib/CGI.pm uploadInfo upload code injection

A vulnerability was found in CGI up to 4.99. It has been rated as problematic. Impacted is the function uploadInfo of the file lib/CGI.pm of the component Upload Handler. Performing a manipulation of the argument Upload results in code injection.

This vulnerability is identified as CVE-2026-120646. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More