CVE-2026-11839CWE-434

Arbitrary File Upload in Basarsoft's Rotaban

Critical · published June 11, 2026

CVSS v3.1
9.9
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server.

This issue affects Rotaban: from V2026.06.002 before V2026.06.003.

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-06-11T14:30Z
EPSS history
Timeline
  • 11 JUN 14:30Z
    Arbitrary File Upload in Basarsoft's Rotaban
    cvelistv5