PT-2026-25713 · Lagom · Whmcs Template

S4Nnty + 1 · Publicado 2026-03-16 · Atualizado 2026-03-16 · CVE-2026-4239

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Lagom WHMCS Template versions through 2.3.7

Description A flaw exists within the Datatables component of Lagom WHMCS Template. This issue involves the improper control of modification of object prototype attributes, potentially allowing for remote attacks. The details of the vulnerable function are not specified. The exploit for this issue has been publicly released, and the vendor was notified but did not respond.

Recommendations Update Lagom WHMCS Template to a version beyond 2.3.7.

Exploit

Correção

Prototype Pollution

Code Injection

Enumeração de Fraquezas

CWE-1321

CWE-94

Identificadores relacionados

CVE-2026-4239

Produtos afetados

Whmcs Template

Referências · 7

• 🔥 https://github.com/devsamuelsantiago/lagom-prototype-pollution-poc/blob/main/lagom-prototype-pollution-poc.js · Exploit
• 🔥 https://github.com/devsamuelsantiago/lagom-prototype-pollution-poc · Exploit
• https://vuldb.com/?id.351181 · Nota
• https://vuldb.com/?ctiid.351181 · Nota
• https://vuldb.com/?submit.771350 · Nota
• https://twitter.com/CVEnew/status/2033583639741796509 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-4239 · Nota de Segurança