Skip to content
Threat Feed
Subscribe

Vendor

ICEcoder

2 briefs RSS
high advisory

Path Traversal Vulnerability in ICEcoder (CVE-2026-64836)

ICEcoder versions 8.1 and earlier are vulnerable to path traversal via a logic error in the file-control endpoint, enabling authenticated attackers to perform arbitrary file reads, writes, and deletions.

ICEcoder
1r 3t 1c
critical advisory

Unauthenticated Remote Code Execution in ICEcoder 8.1

ICEcoder version 8.1 contains a critical vulnerability allowing unauthenticated remote code execution via a crafted HTTP POST request to the terminal endpoint that chains authentication and CSRF bypasses.

ICEcoder web-application-vulnerability rce cve-2026-63722
1r 2t 1c