Beveiligingsadvies

CVE-2026-25099

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-27 11:55:23

Laatst bijgewerkt 2026-03-27 12:42:38

Toegewezen door CERT-PL

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution. This issue was fixed in 3.18.4.

← Alle CVE's bekijken Bekijk op cve.org ↗