Path Traversal in Webkul Bagisto

CVE-2026-9506

This vulnerability exists in Bagisto due to improper validation of user-supplied input in the ImageCacheController component. An unauthenticated remote attacker could exploit this vulnerability by sending crafted path traversal sequences t…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (37.0th percentile) — read the EPSS interpretation.