Bricksforge CVE-2026-85097: Unauthenticated PHP Upload Under Attack Since 7 October
Bricksforge before 4.0.1 lets anyone upload PHP without logging in. Patchstack saw attacks from 7 October; CVSS 9.8. Who is exposed and what to check.
· 5 minTopic
Coverage tagged cve 2026 85097.
Bricksforge before 4.0.1 lets anyone upload PHP without logging in. Patchstack saw attacks from 7 October; CVSS 9.8. Who is exposed and what to check.
· 5 min