CVE-2025-69992

Critical · 9.8

CVSS

9.8

EPSS

0.6%

Published

Jan 13, 2026

CISA due date

—

The record

phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the server without identity authentication.

Affected packages

Ecosystem	Package	Introduced	Fixed