CVE-2026-79362

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-79362
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79362.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-79362
Published
2026-09-11T00:00:00Z
Modified
2026-09-23T03:31:03Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until < 6.2.6. An authenticated low-privileged user can inject PHP into executable cache files generated by WoltLab Suite Core. Attacker-controlled data can terminate the nowdoc prematurely and inject arbitrary PHP Code.

Database specific 
{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79362.json"
}
References

Affected packages

Git / github.com/woltlab/wcf

Affected ranges

Type
GIT
Repo
https://github.com/woltlab/wcf
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c19789dbcc15663c648db1b196b6e6b05265b121
Database specific
Show details 
{
    "source":  "REFERENCES"
}

Affected versions

2.*
2.0.0
2.0.0_Beta_1
2.0.0_Beta_10
2.0.0_Beta_2
2.0.0_Beta_3
2.0.0_Beta_4
2.0.0_Beta_6
2.0.0_Beta_8
2.0.0_Beta_9
2.0.1
2.0.2
2.0.4
2.0.4_pl_1
2.1.0
2.1.0_Beta_1
2.1.0_Beta_2
2.1.0_Beta_4
2.1.0_RC_1
2.1.0_RC_2
2.1.1
2.1.10
2.1.11
2.1.2
2.1.2_pl_1
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
2.1.9_pl_1
3.*
3.0.0
3.0.0_Beta_3
3.0.0_Beta_4
3.0.0_Beta_5
3.0.0_RC_1
3.0.0_RC_2
3.0.0_RC_3
3.0.0_RC_4
3.0.1
3.0.1_pl_1
3.0.2
3.0.2_pl_2
3.1.0_Alpha_1
3.1.0_Alpha_2
3.1.0_Alpha_3
3.1.0_Alpha_4
3.1.0_Beta_1
3.1.0_Beta_2
3.1.0_Beta_3
3.1.0_Beta_4
3.1.0_Beta_5
5.*
5.2.0
5.2.0_Alpha_1
5.2.0_Alpha_2
5.2.0_Alpha_3
5.2.0_Beta_2
5.2.0_Beta_3
5.2.0_Beta_4
5.2.0_RC_1
5.2.0_RC_2
5.2.1
5.2.2
5.3.0_Beta_1
5.3.0_Beta_2
5.3.0_RC_1
5.3.0_RC_2
5.4.0_Alpha_1
5.4.0_Alpha_2
5.4.0_Alpha_3
5.4.0_Beta_1
5.5.0_Alpha_1
5.5.0_Alpha_2
5.5.0_Alpha_3
5.5.0_Alpha_4
5.5.0_Alpha_5
5.5.0_Alpha_6
5.5.0_Beta_1
6.*
6.0.0_Alpha_1
6.0.0_Alpha_2
6.0.0_Alpha_3
6.0.0_Alpha_4
6.0.0_Alpha_5
6.0.0_Alpha_7
6.0.0_Alpha_8
6.0.0_Beta_1
6.0.0_Beta_2
6.0.0_Beta_3
6.0.0_Beta_4
6.0.0_RC_1
6.1.0
6.1.0_Alpha_1
6.1.0_Alpha_2
6.1.0_Alpha_3
6.1.0_Beta_1
6.1.0_Beta_2
6.1.0_RC_1
6.1.1
6.1.10
6.1.10_dev_1
6.1.10_dev_2
6.1.11
6.1.12
6.1.12_dev_1
6.1.12_dev_2
6.1.12_dev_3
6.1.13
6.1.13_dev_1
6.1.14
6.1.14_dev_1
6.1.15
6.1.16
6.1.17
6.1.18
6.1.19
6.1.1_dev_1
6.1.2
6.1.20
6.1.21
6.1.22
6.1.2_dev_1
6.1.3
6.1.3_dev_2
6.1.3_dev_3
6.1.4
6.1.4_dev_1
6.1.5
6.1.6
6.1.6_dev_1
6.1.6_dev_2
6.1.6_dev_3
6.1.7
6.1.7_dev_1
6.1.7_dev_2
6.1.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79362.json"