PT-2026-42720 · Mothra · Mothra

Cinap_Lenrek + 2 · Published 2026-05-22 · Updated 2026-05-22 · CVE-2026-9053

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P/AU:N/R:A/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions Mothra (affected versions not specified)

Description Mothra respects default values provided by websites for HTML file upload forms. This allows an attacker to create a website containing a malicious default file path and hide the form element to mislead the user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-9053

Affected Products

Mothra

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-9053 · Security Note
• https://twitter.com/CVEnew/status/2057783183354048649 · Twitter Post
• https://git.9front.org/plan9front/9front/d145acc9ef0da47131af6ad94e87264e04870d47/commit.html · Note