PT-2026-26628 · Unknown · Precurio Intranet Portal

Indoushka · Published 2026-03-20 · Updated 2026-03-22 · CVE-2026-32989

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Precurio Intranet Portal version 4.4

Description Precurio Intranet Portal 4.4 contains a cross-site request forgery condition. Attackers can leverage this to compel authenticated users to submit malicious requests to a profile update endpoint that manages file uploads. Successful exploitation allows attackers to upload executable files to publicly accessible locations, potentially resulting in arbitrary code execution on the web server. The vulnerable endpoint handles file uploads during profile updates. The profile update endpoint is susceptible to crafted requests.

Recommendations Precurio Intranet Portal version 4.4: Implement same-site cookies and rotating tokens to prevent cross-site request forgery attacks.

Exploit

Fix

Unrestricted File Upload

CSRF

Weakness Enumeration

CWE-434

CWE-352

Related Identifiers

CVE-2026-32989

Affected Products

Precurio Intranet Portal

References · 8

• 🔥 https://packetstorm.news/files/id/215644 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-32989 · Security Note
• https://twitter.com/CveFindCom/status/2035034313331196400 · Twitter Post
• https://twitter.com/CVEnew/status/2035626970155782549 · Twitter Post
• https://precurio.com · Note
• https://twitter.com/natalie_avfieb/status/2035115892317855898 · Twitter Post
• https://twitter.com/TheHackerWire/status/2035089137611809069 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2035105224537387073 · Twitter Post