CVE-2026-82450: Php Image Filename Unvalidated Extensioncve-2026-82450-php-image-filename-unvalidated-extension
Image filename sanitization extracts the file extension from an input name without validating that the extension belongs to an allowed image format. This can allow attackers to preserve dangerous extensions (such as .php) during image upload or import operations.
