CVE-2026-39353: Php Filesystem Enumeration Used As Authorization Whitelistcve-2026-39353-php-filesystem-enumeration-used-as-authorization-whitelist
A whitelist used for a security decision is derived by enumerating a directory that contains executable PHP code (views/templates/plugins/modules). Any PHP file an attacker can write into the scanned directory (admin file-write primitive, unsafe upload path, or permissive directory permissions) is automatically treated as "allowed"; once the validated name i
