PT-2026-42999 · Unknown · Klik Socialmediawebsite

G111 · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9421

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KLiK SocialMediaWebsite version 1.0

Description An issue exists in the File Handler component within the uniqid() function of the upload.inc.php file. This flaw allows for unrestricted file upload, which can be initiated remotely.

Recommendations As a temporary workaround, consider restricting access to the upload.inc.php file or disabling the uniqid() function within the File Handler component until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-9421

Affected Products

Klik Socialmediawebsite

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-9421 · Security Note
• https://vuldb.com/submit/813725 · Note
• https://vuldb.com/vuln/365402 · Note
• https://t.me/CVEtracker/54819 · Telegram Post
• https://twitter.com/CVEnew/status/2058935296046055832 · Twitter Post
• https://vuldb.com/vuln/365402/cti · Note
• https://twitter.com/infoflowcloud/status/2058936387227791863 · Twitter Post