Live › vulnerability › CVE-2026-116223
Go to dashboardEasyImage up to 2.8.7 has a flaw in app/del.php where a manipulated hash argument leads to improper privilege management. The sources say the attack can be launched remotely and that a public exploit has been published.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 07:28 UTC. All times on this page are UTC.
Any deployment of icret EasyImage at version 2.8.7 or earlier is potentially exposed, since the flaw is reachable remotely through the del.php endpoint. The sources do not say whether authentication or a non-default setting is required. Teams not running EasyImage can skip it.
No product ranges from the sources yet.
2.8.7 are reported affectedb12cb67d447bcbb67e21c8f011d0f5638229760c in the deployed code, or check whether app/del.php matches the patched versionapp/del.php with unusual hash parameter values2.8.7 that includes commit b12cb67d447bcbb67e21c8f011d0f5638229760capp/del.php at the web server or firewall levelEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. The attack can be launched remotely. The exploit has been published and may be used. This patch is called b12cb67d447bcbb67e21c8f011d0f5638229760c. A patch should be applied to remediate this issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-116223")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.