CVE-2026-80235: critical vulnerability in Thinking Software Technology EFence
Thinking Software Technology｜EFence - Arbitrary File Upload
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.9%
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Thinking Software Technology · EFenceRelated CVEs — Thinking Software Technology EFence
In the same product, most dangerous first.