CVE-2024-47823

score

<0.1

cvss

9.8

epss

0.8%

published

2024-10-08

kev added

—

first seen

2026-10-21

Livewire prior to 2.12.7 and 3.5.2 contains a remote code execution caused by filename extension validation bypass in file uploads, letting attackers upload malicious PHP files with valid MIME types, exploit requires files stored on server with PHP execution enabled.