PT-2026-6058 · Hillstone Networks · Hillstone Networks Security Gateway+1

Published 2026-02-04 · Updated 2026-02-04 · CVE-2026-1791

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Hillstone Networks Operation and Maintenance Security Gateway versions V5.5ST00001B113 Hillstone Networks Security Gateway version V5.5

Description The software contains a flaw related to unrestricted file uploads, potentially allowing an attacker to upload a web shell to a web server. This could lead to unauthorized access and control of the system.

Recommendations Update Hillstone Networks Operation and Maintenance Security Gateway to a version later than V5.5ST00001B113. Update Hillstone Networks Security Gateway to a version later than V5.5.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-1791

Affected Products

Hillstone Networks Operation/Maintenance Security Gateway

Hillstone Networks Security Gateway

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-1791 · Security Note
• https://t.me/cveNotify/150817 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2018906618390257700 · Twitter Post
• https://t.me/CVEtracker/43679 · Telegram Post
• https://hillstonenet.com.cn/security-notification/2025/12/08/wgscld · Note