CVE WATCH / VULNERABILITY DETAIL
CVE-2026-124591
MEDIUMCVSS 5.5NVD feed
Published 9 November 2026 · tracked since 9 November 2026
Description
A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124684 MEDIUM 5.1
- CVE-2026-123460 HIGH 7.1
- CVE-2026-120838 MEDIUM 6.5
- CVE-2026-120367 HIGH 7.5
- CVE-2026-115252 CRITICAL 10
- CVE-2026-113702 MEDIUM 4.3
- CVE-2026-106466 HIGH 7.5
- CVE-2026-106008 MEDIUM 5.3
- CVE-2026-121764 HIGH 7.1
- CVE-2026-111453 MEDIUM 4.3