Skip to content
Vulnerability intelligence

CVE-2026-85097: Bricksforge remote code execution

The plugin checked uploaded files once, then trusted what visitors said about them. Patchstack saw attempts begin October 7.

2026
What WebPulse reported · 1 analysis
Attackers target Bricksforge plugin flaw that allows remote code execution

The plugin checked uploaded files once, then trusted what visitors said about them. Patchstack saw attempts begin October 7.

October 8, 2026
View CVE-2026-85097 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795