CVE-2026-94267Published
Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-94267 · Microsoft / collected KEV context
cve-program · CVE-2026-94267
Related operational evidence
Explicit CVE identifiers- Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action · Newly collected advisory · 23 Oct 2026