CVE-2026-84063 — D-ZERO CO.,LTD. / BurgerEditor

CVE-2026-84063

D-ZERO CO.,LTD. / BurgerEditor PUBLISHED

Description (CNA)

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed.

Affected (CNA)

Vendor / product	Versions
D-ZERO CO.,LTD. / BurgerEditor	affected 3.2.0 through 3.4.0
D-ZERO CO.,LTD. / BurgerEditor	affected 2.28.0 through 2.30.0

CWE

CWE-434

References

https://jvn.jp/en/jp/JVN21088484/
https://burger.d-zero.co.jp/blogs/archives/3

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.