{
  "title": "CVE of the day — CVE-2026-118423 (CVSS 10,0, critical)",
  "title_variants": [
    {
      "id": "v0",
      "title": "CVE of the day — CVE-2026-118423 (CVSS 10,0, critical)"
    },
    {
      "id": "v1",
      "title": "CVE-2026-118423: critical vulnerability, CVSS 10,0/10, type upload of dangerous"
    }
  ],
  "description": "CVE-2026-118423: critical vulnerability, CVSS 10,0/10, type upload of dangerous files, exploitable remotely, without privileges, without user interaction. The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its form submissions, allowing unauthenticated..",
  "keywords": [
    "c",
    "cve-2026-118423",
    "vulnerability",
    "critical vulnerability",
    "♪",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "scenes": [
    {
      "title": "CVE-2026- 118423",
      "subtitle": "CVSS 10.0",
      "text": "CVE-2026-118423: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database."
    },
    {
      "title": "Upload of dangerous files",
      "subtitle": "upload of dangerous files · CVSS v3.1",
      "text": "The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its forms submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and them execute.."
    },
    {
      "title": "EXPOSURE AND MITIGATION",
      "subtitle": "remotely exploitable, without privileges, without user interaction",
      "text": "Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ],
  "publication_date": "2026-11-08T04:25:27.481Z",
  "duration": 20,
  "topic": "cve",
  "lang": "en",
  "translation_group": "cve-2026-11-08",
  "poster": "cve-2026-11-08-en.jpg",
  "preview": "cve-2026-11-08-en.gif",
  "og_card": "cve-2026-11-08-en.og.jpg",
  "audiogram": "cve-2026-11-08-en.audiogram.mp4",
  "captions": "cve-2026-11-08-en.vtt",
  "generation": {
    "procedural": true,
    "ai_generated": [
      "background",
      "voice"
    ],
    "real_data_source": "official public API",
    "filmed_real_event": false,
    "disclosure": "Procedurally generated from real public-source data; abstract AI-generated backgrounds; synthetic (TTS) voice. No real event is filmed or altered."
  },
  "transcript_text": "CVE-2026-118423: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database. The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its forms submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and them execute.. Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "transcript": [
    {
      "start": 0,
      "end": 6.667,
      "text": "CVE-2026-118423: Critical gravity, CVSS score 10,0 out of 10 according to the National Vulnerability Database."
    },
    {
      "start": 6.667,
      "end": 13.333,
      "text": "The WP Libre Form WordPress plugin 1.5.0.1 does not validate the type of files uploaded through its forms submissions, allowing unauthenticated attackers to upload PHP files to a web-accessible location and them execute.."
    },
    {
      "start": 13.333,
      "end": 20,
      "text": "Remotely exploitable Vulnerability, without privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ]
}