CVE-2026-104069

7.2 HIGHpublic exploit available

Published 2026-10-06 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensions, or content is performed. An authenticated administrator can upload a crafted theme archive containing a PHP file and an .htaccess file to re-enable execution, then request it under the themes directory to execute arbitrary OS commands as the web-server user.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-434

Public exploit & PoC references

https://github.com/danielbrendel/hortusfox-web/commit/3b87393d38ce408ec6f0946ffb3cbf0d08b5f07c
https://github.com/danielbrendel/hortusfox-web/releases/tag/v6.2

All references

https://github.com/danielbrendel/hortusfox-web/commit/3b87393d38ce408ec6f0946ffb3cbf0d08b5f07c
https://github.com/danielbrendel/hortusfox-web/releases/tag/v6.2
https://www.vulncheck.com/advisories/hortusfox-remote-code-execution-via-theme-import

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2023-54405PoC
HIGHCVE-2025-15700
HIGHCVE-2026-100389
MEDIUMCVE-2026-101071PoC
HIGHCVE-2026-102130PoC
MEDIUMCVE-2026-102137PoC
HIGHCVE-2026-102143PoC
MEDIUMCVE-2026-102263

Related by shared AI tags and CWE weakness class. Browse the full archive.