VulnSocial

CVE-2026-78202Disclosure

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-284CWE-434

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Exploit: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-08-24); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-24: 1Mentions · 2026-08-31: 1PoC Mentioned / Linked · 2026-08-31: 1Patch / Workaround · 2026-08-31: 1Technical Details · 2026-08-24: 1Technical Details · 2026-08-31: 108-2408-31
Signal classification2 categories
Disclosure
150.0%
Exploit
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-08-241
Disclosure1
2026-08-311
Exploit1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-78202 A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument im… https://www.cve.org/CVERecord?id=CVE-2026-78202

    Post summary

    The text announces a new vulnerability (CVE‑2026‑78202) affecting Payroll System 1.0’s save_settings function, describing the affected function and argument manipulation but providing no PoC, exploit, or patch details.

    00010710
    58.0K followersView on X
  • DFIR Lab@DFIR_Lab
    Exploit

    🚨 HIGH: CVE-2026-78202 (CVSS 7.3) - Unrestricted file upload in itsourcecode Payroll System 1.0 (admin_class[.]php). Exploit public. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/CICHlfbJWd

    Post summary

    The tweet reports that CVE-2026-78202, a file‑upload flaw in itsourcecode Payroll System 1.0, has a publicly available exploit and urges users to apply a patch immediately.

    0000043
    121 followersView on X

Explore more

Back to dashboard