Unrestricted File Upload Vulnerability in Mautic 7 Leads to Remote Code Execution
A critical vulnerability (CVE-2026-115188) exists in Mautic 7, allowing authenticated users to upload arbitrary files, including server-side scripts, leading to remote code execution with web server privileges. This vulnerability has a CVSS score of 9.9 and affects Mautic versions 7.0.0 to 7.2.2. Immediate action is required to mitigate this vulnerability.