PT-2026-26967 · Acrel · Environmental Monitoring Cloud Platform

Vuldb + 1 · Published 2026-03-22 · Updated 2026-03-22 · CVE-2026-4536

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Acrel Environmental Monitoring Cloud Platform version 1.1.0

Description A flaw exists in Acrel Environmental Monitoring Cloud Platform that allows for unrestricted file uploads due to manipulation of an unknown process. The issue can be exploited remotely. The exploit has been publicly released.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2026-4536

Affected Products

Environmental Monitoring Cloud Platform

References · 10

• 🔥 https://github.com/LTX-GOD/Mycve/blob/main/Acrel_Co_Ltd.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4536 · Security Note
• https://vuldb.com/?ctiid.352324 · Note
• https://twitter.com/CVEnew/status/2035619707370541393 · Twitter Post
• https://twitter.com/cyberbivash/status/2035588238321021410 · Twitter Post
• https://vuldb.com/?submit.774423 · Note
• https://twitter.com/CVEarity/status/2035715772543348981 · Twitter Post
• https://twitter.com/cyberbivash/status/2035591203798790354 · Twitter Post
• https://vuldb.com/?id.352324 · Note
• https://twitter.com/RedPacketSec/status/2035596719203700854 · Twitter Post