CVE-2026-6885criticalCWE-434

CVE-2026-6885: critical vulnerability in Borg SPM 2007

BorG Technology Corporation｜Borg SPM 2007 - Arbitrary File Upload

Published

Follow this CVE+ Monitor Borg SPM

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.5%
Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
BorG Technology Corporation · Borg SPM 2007
Related CVEs — Borg SPM 2007

In the same product, most dangerous first.

CVE-2026-6886CRITICALBorG Technology Corporation｜Borg SPM 2007 - Authentication BypassEPSS 0.5%CVE-2026-6887CRITICALBorG Technology Corporation｜Borg SPM 2007 - SQL InjectionEPSS 0.4%