CVE-2026-6847criticalCWE-306

CVE-2026-6847: falha crítica em 4real ThemisNETPanel

Unauthenticated Remote Code Execution in ThemisNETPanel

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ThemisNETPanel

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.9%
Remote Code Execution vulnerability exists in ThemisNETPanel due to missing authentication for a critical file upload function. The application exposes an endpoint that allows unauthenticated attackers to upload arbitrary PHP files by providing a base64-encoded payload and to execute arbitrary code on the underlying server. This issue has been fixed by a patch released in April 2026.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Produtos afetados
4real · ThemisNETPanel