HIGHCVSS v4 8.8Vulnerability
CVE-2026-4337
Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could also allow them to delete files.
Properties
- Cvss score
- 8.8
- First seen
- 2026-10-27T12:30:56+00:00
- Last seen
- 2026-10-27T12:30:56+00:00
- Euvd assigner
- INCIBE
- Retrieved at
- 2026-10-27T15:31:26+00:00
- Src batch id
- euvd-20261027T133402Z-d7f34b
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-110807
- Score
- 8.8
- Euvd base score version
- 4.0
- Fetched at
- 2026-10-27T13:34:22+00:00
- Euvd vendor
- PuMuKIT
- Cvss vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-10-27T13:34:22+00:00
- Euvd base score
- 8.8
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Content hash
- 55a7f95091062bf2d37f95ad00ff5b6abdf8a4c29cfd3e646fa0d99255823fc1
- Published at
- 2026-10-27T12:17:08.053
- Last modified
- 2026-10-27T15:02:47.683
- Euvd updated
- 2026-10-27T12:30:56+00:00
- Euvd epss pct
- 0
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph