CVE-2026-78839

CVE-2026-78839

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file.

Public proof-of-concept exploits

nabeelmkhan/CVE-2026-78839

References

Frequently asked questions

What is CVE-2026-78839?: CVE-2026-78839 is a vulnerability. Published 2026-09-04.
Is CVE-2026-78839 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.