CVE-2026-82450: Php Image Filename Unvalidated Extension
Image filename sanitization extracts the file extension from an input name without validating that the extension belongs to an allowed image format. This can allow attackers to preserve dangerous extensions (such as .php) during image upload or import operations.
PHPgreprules fetch cve-2026-82450-php-image-filename-unvalidated-extension --engine opengrepDescription
Image filename sanitization extracts the file extension from an input name without validating that the extension belongs to an allowed image format. This can allow attackers to preserve dangerous extensions (such as .php) during image upload or import operations.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.