CVE-2026-92532: falha de alta gravidade em BugTracker.NET
Unrestricted Upload of File with Dangerous Type in BugTracker.NET
Publicada em
18Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5
probabilidade de exploração
—
exploração observada
nãonenhuma fonte reporta
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server. A successful exploit could allow arbitrary code execution with the privileges of the account used by the web service.
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
BugTracker.NET · BugTracker.NETCVEs relacionadas — BugTracker.NET
No mesmo produto, das mais perigosas para as menos.