CVE-2026-84063: Medium severity BurgerEditor vulnerability
Published Sep 10, 2026
·Updated
BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused.
Affected Software
1 affected component
BurgerEditor>=3.2.0<=3.4.0
Event History
Sep 10, 2026
CVE Published
via MITRE·02:15 AM
Data Sourced
via MITRE·02:15 AM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments are affected?
BurgerEditor versions 3.2.0 through 3.4.0 are affected.
2
What access does an attacker need to exploit this issue?
The attacker must be able to log in to BurgerEditor. The vulnerability does not require user interaction and can be exploited over the network.
3
What could an attacker do after successful exploitation?
An authenticated attacker may upload an arbitrary dangerous file type. This could allow arbitrary PHP code execution.