Skip to content
Threat Feed

Tag

Htaccess

1 brief RSS
critical advisory

Vvveb Authenticated Remote Code Execution via .htaccess Upload (CVE-2026-41934)

Vvveb versions before 1.0.8.2 are vulnerable to authenticated remote code execution (RCE), enabling low-privilege users to execute arbitrary code by uploading a malicious .htaccess file and subsequently uploading PHP code with a mapped extension, resulting in unauthenticated RCE upon file access.

Vvveb rce htaccess CVE-2026-41934 attack.execution
2r 1t 1c