CVE lookup

CVE-2026-63223

Pruva has a verified reproduction for CVE-2026-63223: CodeIgniter4 is_image/mime_in upload validation bypass — unrestricted file upload leading to RCE. The canonical evidence record is REPRO-2026-00320.

REPRO

REPRO-2026-00320

Package

codeigniter4/framework · github

Severity

CRITICAL

Status

published

Open verified reproduction Plain text for agents NVD source