TI-2026-26067 CVE-2026-33687 · GHSA-fr76-5637-w3g9
Sharp has Unrestricted File Upload via Client-Controlled Validation Rules
Priority MEDIUM 41
Sharp is a content management framework built for Laravel as a package.
code16
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
code16 records in CISA KEVNo code16 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Sharp · all components
TI-2026-26066 CVE-2026-33686 · GHSA-9ffq-6457-8958
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil
Priority MEDIUM 41
Sharp is a content management framework built for Laravel as a package.