CVE-2023-27246: Mk-Auth

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file.

Affected products

• Mk-Auth Mk-Auth: up to and including 23.01k4.9

Published 2023-03-28. Last modified 2026-06-17.