CyberSecBulletin

Technical-laohu vulnerabilities

We track 1 vulnerability in Technical-laohu products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 19, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Technical-laohu vulnerabilities

  • 9.8 Critical severity

    mpay: Unrestricted Upload of File with Dangerous Type

    CVE-2026-1152Technical-laohu

    A security vulnerability has been detected in technical-laohu mpay up to 1.2.4. The impacted element is an unknown function of the component QR Code Image Handler. Such manipulation of the argument codeimg leads to unrestricted upload. The attack may be launch