{"uuid": "ec4424ed-e77f-4535-b3c0-4f8528e9e01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104070", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117395650314099839", "content": "Someone needs to check on the USMC.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-104070\n\nThe Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting the secu_ anti-forgery parameter in crayons_store.php, causing the authorization dispatcher to resolve an unconditionally-true handler instead of the proper modification check. Attackers can chain this flaw to write a malicious .html skeleton file, disclose sensitive configuration files containing the site secret, and forge a signed ajax context to execute the uploaded skeleton, achieving arbitrary PHP code execution as the web-server user.", "creation_timestamp": "2026-10-06T19:37:47.210927Z"}