CVE-2026-116223 icret CVE debrief

Who should care

Defenders responsible for systems using icret EasyImage up to 2.8.7 should assess exposure and prioritize patching to prevent potential exploitation. This includes reviewing and updating inventory, monitoring systems for potential exploitation attempts, and verifying affected systems and inventory checks. Defenders should also prioritize patching and remediation efforts, and review compensating controls for exposed systems while remediation is scheduled.

Why it matters

CVE-2026-116223 is a medium-severity vulnerability in icret EasyImage up to 2.8.7 that allows for improper privilege management and can be exploited remotely. Defenders should prioritize patching and verify affected systems to prevent potential exploitation.

• Potential unauthorized access due to improper privilege management.
• Possible remote exploitation attempts.
• Need for verification of affected systems and inventory checks.
• Priority for patching and remediation efforts.

Technical summary

The vulnerability is located in an unknown function of the file app/del.php in icret EasyImage up to 2.8.7. It allows for improper privilege management through manipulation of the argument hash. The attack can be launched remotely. The vulnerability has a medium severity and defenders should assess exposure and prioritize patching to prevent potential exploitation. The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and available patch. Defenders should prioritize patching this vulnerability, as it can be exploited remotely and may impact systems using icret EasyImage up to 2.8.7.

Defensive priority

Defenders should prioritize patching this vulnerability, as it can be exploited remotely and may impact systems using icret EasyImage up to 2.8.7.

Recommended defensive actions

• Apply the available patch, b12cb67d447bcbb67e21c8f011d0f5638229760c, to remediate the vulnerability.
• Review and update inventory to identify and patch affected systems using icret EasyImage up to 2.8.7.
• Monitor systems for potential exploitation attempts.
• Verify affected systems and inventory checks.
• Prioritize patching and remediation efforts.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and available patch. The vulnerability is located in an unknown function of the file app/del.php in icret EasyImage up to 2.8.7. It allows for improper privilege management through manipulation of the argument hash. The attack can be launched remotely. Defenders should prioritize patching this vulnerability, as it can be exploited remotely and may impact systems using icret EasyImage up to 2.8.7.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.