U Office Force
CVE-2026-3422
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.
AnalysisAI
U-Office Force by e-Excellence has an insecure deserialization vulnerability allowing unauthenticated remote code execution.
Technical ContextAI
U-Office Force has a CWE-502 insecure deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code through crafted serialized payloads.
RemediationAI
Apply vendor patches. Implement input validation on deserialization endpoints.
More in U Office Force
View allThe U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attac
e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. Rated critical
The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular
e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. Rate
U-Office Force Download function has a path traversal vulnerability. Rated medium severity (CVSS 6.5), this vulnerabilit
U-Office Force Download function has a path traversal vulnerability. Rated medium severity (CVSS 6.5), this vulnerabilit
U-Office Force PrintMessage function has insufficient filtering for special characters. Rated medium severity (CVSS 6.1)
U-Office Force Bulletin function has insufficient filtering for special characters. Rated medium severity (CVSS 6.1), th
U-Office Force login function has an Open Redirect vulnerability. Rated medium severity (CVSS 6.1), this vulnerability i
U-Office Force Forum function has insufficient filtering for special characters. Rated medium severity (CVSS 5.4), this
U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. Rated mediu
e-Excellence U-Office Force generates an error message in webiste service. Rated medium severity (CVSS 5.3), this vulner
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Deserialization
View allShare
External POC / Exploit Code
Leaving vuln.today