unopim CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH unopim CVE published 2026-09-02

CVE-2026-82524

CVE-2026-82524 UnoPim File Upload Vulnerability allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. This high-severity vulnerability can lead to potential for arbitrary PHP file uploads and execution, possible elevation of privileges for authenticated administrators, and risk of remote code exec [truncated]