Arbitrary file upload in Hytalemodding Wiki

CVE-2026-34735

The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis. In version 1.2.0 and prior, the quickUpload() endpoint validates uploaded files by checking their MIME type (via PHP's finfo, which inspects fil…

Vulnerability class: Unrestricted File Upload

EPSS: 0.001 (23.9th percentile) — read the EPSS interpretation.