CVE Catalog
CVE-2026-36669
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.56%
43th percentile - higher than 43% of all known CVEs
Summary
Feng Office 3.11.13.11 has an unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php. Remote attackers can upload malicious files (e.g., .html) to the web-accessible /tmp/ directory.
Risk Assessment
An attacker can upload a malicious HTML file that, if opened by an administrator, could lead to session theft or XSS attacks.
Recommendation
Update Feng Office to the latest version. Restrict access to the /tmp/ directory and check for unexpected files.
Original NVD description (English source)
An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the web-accessible /tmp/ directory.