Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Z-BlogPHP 1.7.5. This affects the function App::UnPack of the file /zb_users/plugin/AppCentre/app_upload.php of the component ZBA File Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-6650 A vulnerability was identified in Z-BlogPHP 1.7.5. This affects the function App::UnPack of the file /zb_users/plugin/AppCentre/app_upload.php of the component ZBA File… https://www.cve.org/CVERecord?id=CVE-2026-6650
Post summary
The text announces a new vulnerability (CVE-2026-6650) in Z-BlogPHP 1.7.5, detailing the affected function and file, but provides no evidence of exploitation, PoC, or mitigation.
CVE-2026-6650 Unrestricted File Upload in Z-BlogPHP 1.7.5 App Upload Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6650
Post summary
This report identifies CVE-2026-6650 as an unrestricted file upload vulnerability in Z‑BlogPHP 1.7.5, but provides no PoC, exploit code, or remediation details.