HIGH 8.4 NVD

CVE-2026-5695

Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without re

Arbitrary file upload vulnerability due to a lack of proper validation in upload forms. This allows authenticated users to upload files to the server without restrictions. An attacker could exploit this flaw to execute malicious code remotely (demonstrated by uploading the EICAR test file), which could result in the system being completely compromised.

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-microweber-adm

Published: 2026-09-23 · Source: NVD · Feed updated: 2026-09-23

This high severity vulnerability with a CVSS score of 8.4 was published on 2026-09-23 via NVD.

vulnfeed aggregates 12912 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.