{"uuid": "ca173563-f7bf-4a39-a6e6-80262cfbb567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://gist.github.com/ichintu/6f6d6a80c56f871cb012c31151e3888f", "content": "This daily digest highlights two cybersecurity updates:\n\n1. **CVE-2026-94104 (NivoCart \u22642.4.0):** A high-severity (8.8) vulnerability that enables remote code execution via arbitrary PHP file uploads. The flaw stems from missing file extension validation in the file manager's `multi()` endpoint and requires only basic back-office access to exploit.\n2. **EchelonGraph Pulse:** A newly launched, rapid CVE notification tool designed for cybersecurity professionals, currently seeking community feedback to refine its features and improve user support.", "creation_timestamp": "2026-09-20T12:01:53.345538Z"}