CVE-2026-71620

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file

• Published Sep 4, 2026
• CVSS 8.1 high
• 0.6% chance of exploitation in the next 30 days (EPSS)

CVE-2026-71620 at the National Vulnerability Database