CVE-2026-78839

Description

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file.

Affected Platforms

Weakness Type

CWE-434

References

• https://github.com/nabeelmkhan/CVE-2026-78839
• https://packetstormsecurity.com