CVE Intelligence

Douco vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Douco products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-2226 High · 7.2 CWE-284 Feb 9, 2026
DouPHP ZIP File file.php unrestricted upload
A vulnerability has been found in DouPHP up to 1.9. This issue affects some unknown processing of the file /admin/file.php of the component ZIP File Handler. Such manipulation of the argument sql_filename leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.