{"id":"CVE-2026-79362","details":"Certain Woltlab products are affected by RCE via Cache Poisoning. WCF \u003e= 6.1.0 until \u003c 6.1.23 and WCF \u003e= 6.2.0 until \u003c 6.2.6. An authenticated low-privileged user can inject PHP into executable cache files generated by WoltLab Suite Core. Attacker-controlled data can terminate the nowdoc prematurely and inject arbitrary PHP Code.","modified":"2026-09-23T03:31:03.445280064Z","published":"2026-09-11T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79362.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://www.woltlab.com/community/thread/319263-update-woltlab-suite-6-2-6-6-1-23/"},{"type":"WEB","url":"https://www.woltlab.com/community/thread/319264-aktualisierung-woltlab-suite-6-2-6-6-1-23/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79362.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79362"},{"type":"FIX","url":"https://github.com/WoltLab/WCF/commit/c19789dbcc15663c648db1b196b6e6b05265b121"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/woltlab/wcf","events":[{"introduced":"0"},{"fixed":"c19789dbcc15663c648db1b196b6e6b05265b121"}],"database_specific":{"source":"REFERENCES"}}],"versions":["6.1.22","6.1.21","6.1.20","6.1.19","6.1.18","6.1.17","6.1.16","6.1.15","6.1.14","6.1.14_dev_1","6.1.13","6.1.13_dev_1","6.1.12","6.1.12_dev_3","6.1.12_dev_2","6.1.12_dev_1","6.1.11","6.1.10","6.1.10_dev_2","6.1.10_dev_1","6.1.8","6.1.7","6.1.7_dev_2","6.1.7_dev_1","6.1.6","6.1.6_dev_3","6.1.6_dev_2","6.1.6_dev_1","6.1.5","6.1.4","6.1.4_dev_1","6.1.3","6.1.3_dev_3","6.1.3_dev_2","6.1.2","6.1.2_dev_1","6.1.1","6.1.1_dev_1","6.1.0","6.1.0_RC_1","6.1.0_Beta_2","6.1.0_Beta_1","6.1.0_Alpha_3","6.1.0_Alpha_2","6.1.0_Alpha_1","6.0.0_RC_1","6.0.0_Beta_4","6.0.0_Beta_3","6.0.0_Beta_2","6.0.0_Beta_1","6.0.0_Alpha_8","6.0.0_Alpha_7","6.0.0_Alpha_5","6.0.0_Alpha_4","6.0.0_Alpha_3","6.0.0_Alpha_2","6.0.0_Alpha_1","5.5.0_Beta_1","5.5.0_Alpha_6","5.5.0_Alpha_5","5.5.0_Alpha_4","5.5.0_Alpha_3","5.5.0_Alpha_2","5.5.0_Alpha_1","5.4.0_Beta_1","5.4.0_Alpha_3","5.4.0_Alpha_2","5.4.0_Alpha_1","5.3.0_RC_2","5.3.0_RC_1","5.3.0_Beta_2","5.3.0_Beta_1","5.2.2","5.2.1","5.2.0","5.2.0_RC_2","5.2.0_RC_1","5.2.0_Beta_4","5.2.0_Beta_3","5.2.0_Beta_2","5.2.0_Alpha_3","5.2.0_Alpha_2","5.2.0_Alpha_1","3.1.0_Beta_5","3.1.0_Beta_4","3.1.0_Beta_3","3.1.0_Beta_2","3.1.0_Beta_1","3.1.0_Alpha_4","3.1.0_Alpha_3","3.1.0_Alpha_2","3.1.0_Alpha_1","3.0.2_pl_2","3.0.2","3.0.1_pl_1","3.0.1","3.0.0","3.0.0_RC_4","3.0.0_RC_3","3.0.0_RC_2","3.0.0_RC_1","3.0.0_Beta_5","3.0.0_Beta_4","3.0.0_Beta_3","2.1.11","2.1.10","2.1.9_pl_1","2.1.9","2.1.8","2.1.7","2.1.6","2.1.5","2.1.4","2.1.3","2.1.2_pl_1","2.1.2","2.1.1","2.1.0","2.1.0_RC_2","2.1.0_RC_1","2.1.0_Beta_4","2.1.0_Beta_2","2.1.0_Beta_1","2.0.4_pl_1","2.0.4","2.0.2","2.0.1","2.0.0","2.0.0_Beta_10","2.0.0_Beta_9","2.0.0_Beta_8","2.0.0_Beta_6","2.0.0_Beta_4","2.0.0_Beta_3","2.0.0_Beta_2","2.0.0_Beta_1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79362.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}