icret CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM icret CVE published 2026-10-26

CVE-2026-116223

A flaw in icret EasyImage up to 2.8.7 allows for improper privilege management via manipulation of the argument hash in an unknown function of the file app/del.php. This issue can be exploited remotely. A patch, b12cb67d447bcbb67e21c8f011d0f5638229760c, is available for remediation. The vulnerability has a medium severity and defenders should assess exposure and prioritize patching to prevent potential ex [truncated]