Is there a public PoC exploit available for CVE-2026-6572?

Yes, a public proof-of-concept exploit is available for CVE-2026-6572. Prioritise patching immediately. EPSS: 0.0%.

PHP CVE-2026-6572

Q: What is the CVSS score of CVE-2026-6572?

CVE-2026-6572 has a CVSS 4.0 base score of 2.9 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-23702 LOW

Improper Authorization (CWE-285)

2026-04-19 VulDB

PHP Authentication Bypass

2.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.9 LOW

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:12 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:12 NVD

6.3 (MEDIUM) 2.9 (LOW)

PoC Detected

Apr 29, 2026 - 01:00 vuln.today

Public exploit code

CVSS changed

Apr 19, 2026 - 13:22 NVD

5.6 (MEDIUM) 6.3 (MEDIUM)

Analysis Generated

Apr 19, 2026 - 12:37 vuln.today

EUVD ID Assigned

Apr 19, 2026 - 12:30 euvd

EUVD-2026-23702

Analysis Generated

Apr 19, 2026 - 12:30 vuln.today

CVE Published

Apr 19, 2026 - 12:15 nvd

LOW 2.9

DescriptionCVE.org

A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of the component fileUpload Endpoint. The manipulation of the argument fileUpload leads to improper authorization. Remote exploitation of the attack is possible. The attack's complexity is rated as high. The exploitation is known to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Improper authorization in Collabora KodExplorer up to version 4.52 allows remote unauthenticated attackers to bypass authentication via manipulation of the fileUpload parameter in the /app/controller/share.class.php endpoint, potentially enabling unauthorized file access or modification with low confidentiality, integrity, and availability impact. Publicly available exploit code exists; however, the attack requires high complexity and is described as difficult to execute in practice, limiting real-world exploitation despite public disclosure and vendor non-responsiveness.

Technical ContextAI

The vulnerability exists in the fileUpload Endpoint handler within Collabora KodExplorer's share.class.php controller module. CWE-285 (Improper Authorization) indicates the root cause is a failure to properly validate or enforce access controls on file operations, likely in the file upload mechanism. The attack vector is network-based against a PHP-based web application. The CPE string cpe:2.3:a:collabora:kodexplorer:*:*:*:*:*:*:*:* indicates the vulnerability affects all versions up to and including 4.52, with no lower-bound version explicitly stated. The manipulation of the fileUpload argument suggests attackers can send specially crafted requests to the endpoint to bypass authentication checks that should restrict who can upload or share files.

RemediationAI

Upgrade Collabora KodExplorer to a version higher than 4.52 if a patched release is available from the vendor; however, no patched version has been independently confirmed at the time of this analysis, and the vendor has not responded to early disclosure. As a compensating control, disable or restrict access to the /app/controller/share.class.php endpoint at the web server level (e.g., via .htaccess or nginx location blocks) if file sharing functionality is not required, or implement network-level access controls to limit exposure to trusted IP ranges only. Apply strict input validation on the fileUpload parameter to reject unexpected or malformed values before the endpoint processes them. Additionally, implement explicit authentication checks prior to any file operation, ensuring that the fileUpload handler re-validates user identity and permission to share files, rather than relying on implicit authorization. Monitor server logs for requests to /app/controller/share.class.php with suspicious fileUpload argument values. Contact Collabora for an official security update or workaround, emphasizing the public availability of exploit code.