CVE WATCH / VULNERABILITY DETAIL
CVE-2026-124635
MEDIUMCVSS 4.7NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
A vulnerability was identified in kevquirk PureBlog up to 3.7.2. Impacted is an unknown function of the file admin/upload-image.php of the component Admin Image Upload Endpoint. Such manipulation leads to unrestricted upload. The attack may be launched remotely. Upgrading to version 3.7.3 is recomme
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124916 MEDIUM 5.4
- CVE-2026-124636 LOW 3.8
- CVE-2026-124625 MEDIUM 6.3
- CVE-2026-124624 MEDIUM 5.3
- CVE-2026-121843 HIGH 8.8
- CVE-2026-121842 HIGH 8.8
- CVE-2026-121841
- CVE-2026-119274 MEDIUM 4.8
- CVE-2026-124622 MEDIUM 5.3
- CVE-2026-124079 CRITICAL 9.8