Threat IntelYii2 Starter Kit Exposes Gii and Debug Modules to Remote Code Execution
ThreatsCloud & SaaSCVE-2026-103475Critical
A critical security flaw in yii2-starter-kit exposes the Gii code generator and debug modules to all remote IP addresses by default, allowing unauthenticated RCE.
CST Editorial Desk8 min read