CVE-2026-8208
NONE—CVSS v3
—CVSS v2
0.05%
EPSS (exploit probability)
CWE-98CWE
Description
Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user provided .zip as PHP. Successful exploitation requires Teacher or higher privileges. Exploitation could result in compromise of the underlying web server.
Affected routers (0)
No routers currently mapped to this CVE in our database.