Medium severity6.5NVD Advisory· Published Sep 10, 2026

CVE-2026-84063

Description

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused.

Patches

Vulnerability mechanics

References

burger.d-zero.co.jp/blogs/archives/3nvd
jvn.jp/en/jp/JVN21088484/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000