@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

kleor Contact Manager <=9.1.2 hit by CRITICAL (CVSS 9.8) vuln: unauthenticated file uploads may lead to RCE on Apache setups. No patch — tighten upload rules & config now. https://radar.offseq.com/threat/cve-2026-109218-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-kleor-contact-mana... https://radar.offseq.com/threat/cve-2026-109218-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-kleor-contact-manager-0a4841efd9c43b5a

2026-10-28T08:00:27.674Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.