PT-2026-46219 · Mjperpinosa · Stumasy

Cnluminous · Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-10806

Mitre

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in mjperpinosa stumasy. The affected element is an unknown function of the file application/PHP/objects/updates/add post.php. Performing a manipulation of the argument up file to post results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-10806

Affected Products

Stumasy

References · 7

• 🔥 https://github.com/mjperpinosa/stumasy/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10806 · Security Note
• https://github.com/mjperpinosa/stumasy · Note
• https://vuldb.com/vuln/368254 · Note
• https://vuldb.com/cve/CVE-2026-10806 · Note
• https://vuldb.com/vuln/368254/cti · Note
• https://vuldb.com/submit/831510 · Note