PT-2026-44820 · Mautic · Mautic

F3Nrir77 + 2 · CVE-2026-9559 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mautic versions 7.0.0 through 7.1.1

Description A path traversal flaw exists in the campaign import feature. During the extraction of uploaded ZIP files, a validation error allows file paths to exit the designated temporary directories. An authenticated user with campaign:imports:create privileges can write arbitrary PHP files to sensitive system directories, potentially overwriting internal configuration or cache components. This can lead to Remote Code Execution (RCE), which is the ability to execute arbitrary commands on a remote machine, under the context of the web server user.

Recommendations Update to version 7.1.2. Revoke campaign:imports:create permissions from non-administrative users.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

CWE-73

CWE-98

Related Identifiers

CVE-2026-9559

GHSA-6R9H-4H75-7Q4X

Affected Products

Mautic

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9559.json · Exploit
• https://osv.dev/vulnerability/GHSA-6r9h-4h75-7q4x · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-9559 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-9559 · Security Note
• https://github.com/mautic/mautic · Note
• https://github.com/mautic/mautic/security/advisories/GHSA-6r9h-4h75-7q4x · Note
• https://packagist.org · Note
• https://t.me/cveNotify/208762 · Telegram Post