Which versions of Precurio Intranet Portal are affected by EUVD-2026-13725?

Precurio Intranet Portal 4.4 has a critical vulnerability allowing attackers to trick employees into uploading malicious files that execute on our web servers.

Is there a public PoC exploit available for EUVD-2026-13725?

Yes, a public proof-of-concept exploit is available for EUVD-2026-13725. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-13725?

Within 24 hours: Inventory all systems running Precurio 4.4 and assess business criticality; notify affected business units of the risk. Within 7 days: Implement compensating controls (WAF rules blocking suspicious file uploads, disable file upload features if non-critical, restrict portal access via network segmentation). Within 30 days: Contact Precurio for patch availability; evaluate alternative intranet solutions if patch timeline is unacceptable; conduct audit of recent file uploads for indicators of compromise.

Precurio Intranet Portal EUVD-2026-13725

Q: What is the CVSS score of EUVD-2026-13725?

EUVD-2026-13725 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-32989 HIGH

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-03-20 VulnCheck

RCE CSRF Precurio Intranet Portal Precurio

8.6

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 16, 2026 - 14:37 vuln.today

cvss_changed

PoC Detected

Apr 01, 2026 - 15:23 vuln.today

Public exploit code

EUVD ID Assigned

Mar 20, 2026 - 16:15 euvd

EUVD-2026-13725

Analysis Generated

Mar 20, 2026 - 16:15 vuln.today

CVE Published

Mar 20, 2026 - 15:50 nvd

HIGH 8.6

DescriptionCVE.org

Precurio Intranet Portal 4.4 contains a cross-site request forgery (CSRF) weakness that can allow an attacker to induce an authenticated user to submit a crafted request to a profile update endpoint that handles file uploads. If the application stores attacker-controlled content as an executable server-side file (e.g., in a web-accessible location with an executable extension), this can lead to arbitrary code execution in the context of the web server.

AnalysisAI

Precurio Intranet Portal 4.4 contains a CSRF vulnerability that allows attackers to trick authenticated users into uploading malicious files to the server, potentially leading to remote code execution with web server privileges. A public exploit is available via PacketStorm (file ID 215644), significantly lowering the barrier for exploitation. The vulnerability carries a CVSS score of 8.8 with network-based attack vector requiring only user interaction.

Technical ContextAI

This vulnerability affects Precurio Intranet Portal, specifically targeting the profile update endpoint that processes file uploads (CPE: cpe:2.3:a:precurio:precurio_intranet_portal:*:*:*:*:*:*:*:*). The root cause is a Cross-Site Request Forgery (CSRF) flaw where the application fails to validate the origin of requests to file upload handlers. When combined with insufficient validation of uploaded file types and improper storage in web-accessible directories with executable permissions, this CSRF weakness enables attackers to chain the vulnerability into arbitrary code execution. The attack leverages the absence of anti-CSRF tokens or same-origin verification on state-changing operations that handle potentially dangerous file uploads.

RemediationAI

Organizations should immediately contact Precurio via https://www.precurio.com to obtain security patches or upgrade guidance for versions beyond 4.4 that address this CSRF vulnerability. As an interim mitigation until patching is complete, implement additional CSRF protections at the web application firewall or reverse proxy layer by enforcing strict Referer and Origin header validation for all POST requests to profile update endpoints. Disable or restrict file upload functionality for profile updates if not business-critical, configure web server to prevent execution of uploaded files by storing them outside the webroot or in directories with noexec permissions, and implement strict Content-Type validation and file extension whitelisting. Educate users about phishing risks and consider implementing browser isolation technologies for accessing the intranet portal from potentially compromised endpoints.