Skip to content
Threat Feed
Subscribe

Tag

Unrestricted-File-Upload

4 briefs RSS
high advisory

CVE-2026-16327: D-Link DNS-320 Unrestricted File Upload Vulnerability

A high-severity unrestricted file upload vulnerability (CVE-2026-16327) in D-Link DNS-320 firmware version 1.0.2 allows remote attackers to upload arbitrary files, potentially leading to remote code execution and full device compromise, with exploit code publicly disclosed.

DNS-320 1.0.2 web-vulnerability remote-code-execution file-upload d-link unrestricted-file-upload nas vulnerability unrestricted-upload +2
4r 4t 2i updated
high advisory

CVE-2026-14736: Ruijie RG-UAC Unrestricted Upload Vulnerability

A critical unrestricted file upload vulnerability, CVE-2026-14736, in Ruijie RG-UAC up to version 1.0-R1.8.2.p5 allows unauthenticated remote attackers to upload arbitrary files via manipulation of the `upload_image` argument in `user_auth_commit.php`, potentially leading to remote code execution.

RG-UAC firmware up to 1.0-R1.8.2.p5 vulnerability rce unrestricted-file-upload webserver cve-2026-14736
3t 1c
medium advisory

KLiK SocialMediaWebsite Unrestricted File Upload Vulnerability (CVE-2026-9421)

CVE-2026-9421 is an unrestricted file upload vulnerability in the File Handler component of KLiK SocialMediaWebsite 1.0 that can be exploited remotely.

SocialMediaWebsite 1.0 unrestricted file upload CVE-2026-9421 web application
2r 1t 1c
high advisory

Funadmin Unrestricted File Upload Vulnerability (CVE-2026-7733)

Funadmin versions up to 7.1.0-rc6 are vulnerable to unrestricted file uploads due to improper handling of the File argument in the UploadService::chunkUpload function, potentially leading to remote code execution.

funadmin <= 7.1.0-rc6 cve unrestricted file upload remote code execution
2r 1t 1c