S4E just found a critical-severity finding from cve-2026-109618 php2shell scanner (version based)
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
CVE

CVE-2024-32231

6.3
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient.
Description

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.

Attack Vector
Network
Privileges Req.
Low
User Interaction
None
Updated Oct 12, 2026View on NVD →
S4E scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →