EUVD-2026-65495
GHSA-6vwr-3w8q-mvj2
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network-reachable file upload leading to web-shell code execution gives full C/I/A impact; PR:N follows the reported vector though pre-auth exposure is unverified.
Primary rating from Vendor (TR-CERT).
CVSS VectorNVD
Lifecycle Timeline
3DescriptionNVD
Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server.
This issue affects Software Repository Management: before 2fb4acee.
AnalysisAI
Unrestricted file upload in TRtek Software Repository Management (all versions before commit 2fb4acee) lets remote attackers upload executable web shells to the server, yielding server-side code execution. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) indicates network-reachable exploitation with no authentication or user interaction, and the full C:H/I:H/A:H impact reflects total server compromise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The concrete prerequisite is network reachability to the application's file-upload feature in Software Repository Management, plus a storage location where uploaded files are served and executed by the web server. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | All available signals point to a high-severity, easily exploitable issue: the CVSS 3.1 base score is 9.8 with a network vector, low complexity, and no privileges or user interaction, and the outcome (web shell) is direct code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to the build containing fix commit 2fb4acee or later; note this is referenced as a source-control commit rather than a tagged release, so the upstream fix is available (PR/commit) but a released patched version is not independently confirmed - confirm the exact distribution/build with the vendor via TR-CERT bulletin TR-26-0899 (https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0899). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Immediately disable or restrict file upload functionality in TRtek deployments; implement Web Application Firewall (WAF) rules to block POST requests to upload endpoints if the service is critical. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today