CVE-2026-78839

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file.

• Published Sep 4, 2026
• CVSS 8.1 high
• 0.6% chance of exploitation in the next 30 days (EPSS)

CVE-2026-78839 at the National Vulnerability Database