Validation-Bypass

Laravel `files.*` Wildcard Validation Bypass via Polyglot JPEG+PHP Upload (CVE-2025-27515) newCVE-2025-27515webCRITICAL 9.8Patched2026-07-06Advanced Custom Fields: Extended Unauthenticated Privilege Escalation via `_acf_post_id` Validation Bypass (CVE-2026-8809) newCVE-2026-8809webCRITICAL 9.8Unverified2026-07-05