PatchSiren

PGYER CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM PGYER CVE published 2026-10-26

CVE-2026-116255

A path traversal vulnerability was found in PGYER codefever up to commit 0c35e60f006f9d558cc33a159baf110659351990, affecting the _detail function in application/controllers/doc.php. The issue is triggered by manipulating the uri_string argument. This vulnerability can be exploited remotely. A patch (e4433eee96883a222403854e8ac38b3146774a07) is available to fix this issue. The product uses a rolling releas [truncated]