PT-2026-52989 · Undefined · Undefined

Publicado 2026-06-26 · Atualizado 2026-06-26 · CVE-2026-33560

NVD

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which allows authenticated users to upload files of any type without validation. No file extension filtering or content inspection is enforced which allows executable binaries and scripts to be accepted and written directly to the server.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2026-33560

Produtos afetados

Undefined

Referências · 3

• https://cisa.gov/news-events/ics-advisories/icsa-26-176-04 · Nota
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-176-04.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-33560 · Nota de Segurança