CVE-2026-88393Published
WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array() function in app/Module/Base.php, which executes …
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-88393 · Microsoft / collected KEV context
cve-program · CVE-2026-88393
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.