CVE-2026-9506

CVE-2026-9506

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences t…

Vulnerability class: Path Traversal (Directory Traversal)

Weakness classification (CWE)

References