AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-10806

CRITICAL · CVSS 9.8 EPSS 2.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-03-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-10806
Severity
CRITICAL
CVSS
9.8
EPSS
2.32%

Original NVD Description

eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.