{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-115188/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:mautic:mautic:7:*:*:*:*:*:*:*","cpe:2.3:a:mautic:mautic:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-115188"},{"cvss":7.1,"id":"CVE-2026-115192"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Mautic (7)","Mautic"],"_cs_severities":["critical"],"_cs_tags":["webserver","rce","file-upload","cve-2026-115188"],"_cs_type":"advisory","_cs_vendors":["Mautic"],"content_html":"\u003cp\u003eMautic 7 contains an unrestricted file upload vulnerability (CVE-2026-115188) in the campaign import feature. An authenticated user with sufficient permissions can upload arbitrary files through the UI or the /api/campaigns/import endpoint. These files are moved to a publicly accessible media directory without validation of filename or extension. On web server configurations (e.g., Apache) that permit script execution in media directories, this enables remote code execution with the privileges of the web server user.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote code execution on the underlying web server. This results in potential unauthorized access to the Mautic application configuration, environment secrets, and sensitive contact data stored within the database or filesystem.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eIdentify all Mautic 7 instances within the environment.\u003c/li\u003e\n\u003cli\u003eRestrict campaign import permissions to only trusted, highly vetted service accounts until a vendor patch is applied.\u003c/li\u003e\n\u003cli\u003eUpdate or apply security hardening to web server configurations to disable script execution (e.g., PHP, Perl) in the Mautic media/upload directories.\u003c/li\u003e\n\u003cli\u003eReview access logs for non-standard file extensions or suspicious filenames being uploaded via the /api/campaigns/import endpoint.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-26T15:45:07Z","date_published":"2026-10-26T15:44:34Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mautic-unrestricted-upload/","summary":"Mautic 7 allows authenticated users with campaign import permissions to achieve remote code execution by uploading arbitrary malicious files to a publicly accessible directory.","title":"Mautic: Unrestricted file upload remote code execution (CVE-2026-115188)","url":"https://feed.craftedsignal.io/briefs/2026-10-mautic-unrestricted-upload/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-115188","version":"https://jsonfeed.org/version/1.1"}