CVE-2026-124591
5.5 MEDIUMpublic exploit availablePublished 2026-11-09 · Updated 2026-11-09
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weaknesses
CWE-74, CWE-1236
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100312PoC
- HIGHCVE-2026-100314PoC
- HIGHCVE-2026-100315PoC
- MEDIUMCVE-2026-100563PoC
- MEDIUMCVE-2026-100564PoC
- HIGHCVE-2026-100739PoC
- HIGHCVE-2026-100874PoC
- HIGHCVE-2026-100875PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.