CVE-2026-116223

A flaw has been found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. The attack can be launched remotely. The exploit has been published and may be used. This patch is called b12cb67d447bcbb67e21c8f011d0f5638229760c. A patch should be applied to remediate this issue.

• CWE-266
• CWE-269

• https://gist.github.com/yyz8097/bc58546872ad90208d2b35260d84b1d9
• https://github.com/icret/EasyImages2.0/commit/b12cb67d447bcbb67e21c8f011d0f5638229760c
• https://github.com/icret/EasyImages2.0/issues/283
• https://vuldb.com/cve/CVE-2026-116223
• https://vuldb.com/submit/1004976
• https://vuldb.com/vuln/426203
• https://vuldb.com/vuln/426203/cti

Published

Oct 26, 2026

Last Modified

Oct 26, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116215MacCMS v10 through 2026.1000.4056 contains a race condition …3.1
• CVE-2026-116216MacCMS v10 through 2026.1000.4056 contains a mass assignment…5.3
• CVE-2026-116217RosarioSIS before 12.9.2 contains a reflected cross-site scr…6.1
• CVE-2026-116218Dolibarr ERP CRM 19.0.0 before 23.0.4 contains an SQL inject…7.6
• CVE-2026-116219Dolibarr ERP CRM before 24.0.0 contains an OS command inject…7.2
• CVE-2026-11622A DNSSEC validating resolver that is under a random subdomai…7.5
• CVE-2026-116224A vulnerability has been found in fr0tt benotes up to 2.8.1.…4.3
• CVE-2026-116227A vulnerability has been found in Edimax BR-6208AC 1.32. Thi…2.4
• CVE-2026-116228A vulnerability was found in 777genius agent-teams-ai up to …3.3
• CVE-2026-116229A vulnerability was determined in ffxiv-teamcraft FFXIV Team…3.5
• CVE-2026-11623A security vulnerability has been detected in tmux up to 3.6…4.5
• CVE-2026-116230A vulnerability was identified in Ndemic Creations Plague In…6.3