CVE-2026-48062: Ci4 Unsafe Guessextension Validationcve-2026-48062-ci4-unsafe-guessextension-validation
Validating file extensions using only `guessExtension()` is insecure if the file is eventually saved with its original client name. An attacker can upload a file with a malicious extension (e.g., .php) containing spoofed file contents (e.g., GIF headers), bypassing the validation. Ensure you also validate `getClientExtension()` to prevent dangerous file uplo
