CVE-2026-79362: Woltlab WoltLab Suite Core (WCF) vulnerability
Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until < 6.2.6. An authenticated low-privileged user can inject PHP into executable cache files generated by WoltLab Suite Core. Attacker-controlled data can terminate the nowdoc prematurely and inject arbitrary PHP Code.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user with low privileges can exploit it. The attacker must be able to supply data that is written into executable cache files generated by WoltLab Suite Core.
Which versions are affected?
Affected versions are WCF 6.1.0 through versions before 6.1.23, and WCF 6.2.0 through versions before 6.2.6. The fixed releases identified in the provided information are 6.1.23 and 6.2.6.
What is the impact of successful exploitation?
Successful cache poisoning lets the attacker prematurely terminate a nowdoc in a generated executable cache file and inject arbitrary PHP code. This results in remote code execution.