Tag

Metasystem

1 brief RSS

CVE-2026-16324: Metasoft MetaCRM Unrestricted File Upload Vulnerability

A high-severity vulnerability, CVE-2026-16324, exists in Metasoft MetaCRM up to version 6.4.0 Beta06, allowing remote attackers to perform unrestricted file uploads by manipulating the 'File' argument within the `/business/qnaire/upload.jsp` component, which can lead to webshell deployment and remote code execution; a public exploit is available, increasing the risk of attack.

MetaCRM cve rce unrestricted-upload web-vulnerability metasystem

1r 2t 1c 11h ago