All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-21628
CRITICALpublished 2026-03-05 10:15 UTC · 5 months ago · modified 2026-06-17 10:18 UTC
10.0
CVSS / 10
// description
A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.
// weaknesses (CWE)
- CWE-434