CVE-2026-35164

Brave CMS versions prior to 2.0.6 contain an unrestricted file upload vulnerability in the CKEditor integration that allows authenticated users to upload and execute arbitrary PHP scripts. The vulnerability exists in the ckupload method of app/Http/Controllers/Dashboard/CkEditorController.php, which fails to properly validate uploaded file types and instead relies on unvalidated user input. The vulnerability presents a HIGH severity risk with a CVSS score of 8.8, exploitable over the network with low attack complexity and requiring only low-level authentication privileges. Successful exploitation results in remote code execution with complete compromise of confidentiality, integrity, and availability on affected systems. There is no current evidence of active exploitation in the wild, as the vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and maintains an inactive status on exploit tracking lists. The EPSS score of 0.0029 indicates minimal probability of exploitation relative to other CVEs, suggesting limited community attention or weaponized exploit availability at this time. Organizations running Brave CMS should prioritize upgrading to version 2.0.6 or later to remediate this risk.