CVE-2026-63223 — CI4RCE: CodeIgniter 4 is_image/mime_in File Upload RCE. Magic bytes bypass (getExtension vs getClientExtension). CVSS 9.8 | CWE-434 | CI4 < 4.7.4
php security exploit codeigniter file-upload poc rce vulnerability infosec cve pentest magic-bytes ci4 pre-auth is-image cve-2026-63223 ci4rce mime-in
-
Updated
Aug 4, 2026 - Python