All 4 CVE vulnerabilities found in ICEcoder, with AI-generated Chinese analysis, references, and POCs.
Vendor: ICEcoder
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-64838 | ICEcoder through 8.1 Path Traversal via oldFileName Parameter CWE-22 | 8.3 | High | 2026-09-10 |
| CVE-2026-64837 | ICEcoder through 8.1 OS Command Injection via lib/properties.php CWE-78 | 8.8 | High | 2026-09-10 |
| CVE-2026-64836 | ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement CWE-22 | 8.8 | High | 2026-09-10 |
| CVE-2026-63722 | ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php CWE-306 | 9.8 | Critical | 2026-08-19 |
All 4 known CVE vulnerabilities affecting ICEcoder with full Chinese analysis, references, and POCs where available.