CVE-2026-9053: 9front

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element.

Affected products

• 9front 9front

Published 2026-05-22. Last modified 2026-07-23.