Skip to content
Threat Feed

Product

MetaCRM (<= 6.4.0 Beta06)

1 brief RSS
high threat

Metasoft MetaCRM Unrestricted File Upload Vulnerability (CVE-2026-8758)

A vulnerability in Metasoft MetaCRM up to version 6.4.0 Beta06 allows for unrestricted file upload due to manipulation of the 'File' argument in the /common/jsp/upload3.jsp file, potentially leading to arbitrary code execution.

exploited MetaCRM unrestricted-upload rce web-application
2r 1t 1c