CVE-2026-3422criticalCWE-502

CVE-2026-3422: falha crítica em e-Excellence U-Office Force

e-Excellence｜U-Office Force - Insecure Deserialization

Publicada em

Seguir esta CVE+ Monitorar U-Office Force

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.9%
U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
e-Excellence · U-Office Force
CVEs relacionadas — e-Excellence U-Office Force

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32756HIGHe-Excellence U-Office Force - Path TraversalEPSS 1.2%CVE-2023-32757CRITICALe-Excellence U-Office Force - Arbitrary File UploadEPSS 0.9%CVE-2025-2396HIGHe-Excellence U-Office Force - Arbitrary File UploadEPSS 0.7%CVE-2023-32755MEDIUMe-Excellence U-Office Force - Error Message LeakageEPSS 0.6%CVE-2025-2395CRITICALe-Excellence U-Office Force - Improper AuthenticationEPSS 0.6%CVE-2025-12865HIGHe-Excellence｜U-Office Force - SQL InjectionEPSS 0.4%