Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in mjperpinosa stumasy. The impacted element is an unknown function of the file application/PHP/objects/profiles/change_profile_image.php. Executing a manipulation of the argument pr_profile_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10807 Unrestricted File Upload in mjperpinosa stumasy Profile Image Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10807
Post summary
The content announces a newly disclosed CVE (Unrestricted File Upload in a specific image handler) without further technical details, exploitation evidence, or mitigation information.