Unrated severityNVD Advisory· Published Jul 17, 2026· Updated Jul 20, 2026

CVE-2026-36669

Description

An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the web-accessible /tmp/ directory.

Affected products

Feng Office/Feng Officellm-create
Range: 3.11.13.11
Firstlax6t/CVE-2026-36669-FengOfficellm-create
Range: 3.11.13.11

Patches

Vulnerability mechanics

References

www.fengoffice.commitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000