CVE-2026-84063CWE-434unrestricted-file-upload

CVE-2026-84063

Medium · published September 10, 2026

CVSS v3.0
6.5
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
8.5 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00435 · 36.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-09-10T07:17Z
References (2)
https://burger.d-zero.co.jp/blogs/archives/3 · [email protected]https://jvn.jp/en/jp/JVN21088484/ · [email protected]
EPSS history
Timeline
  • 11 SEP 03:19Z
    EPSS moved — → 0%
    epss
  • 10 SEP 02:15Z
    BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type
    cvelistv5