CVE-2026-36669
An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to th…
Published: 2026-07-17 · CVSS: 9.8 · CVSS 3.1
An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the web-accessible /tmp/ directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7