CVE WATCH / VULNERABILITY DETAIL
CVE-2026-116113
MEDIUMCVSS 6.3NVD feed
Published 26 October 2026 · tracked since 26 October 2026
Description
A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller/Api.php. The manipulation of the argument file_extension results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been rel
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-116110 HIGH 7.3
- CVE-2026-116112 HIGH 7.3
- CVE-2026-116105 LOW 3.7
- CVE-2026-116106 HIGH 7.3
- CVE-2026-116107 MEDIUM 5.4
- CVE-2026-116100 LOW 2.4
- CVE-2026-116101 MEDIUM 6.3
- CVE-2026-116102 MEDIUM 6.3
- CVE-2026-116103 MEDIUM 6.3
- CVE-2026-116104 MEDIUM 6.3