CVE-2026-16286CWE-434unrestricted-file-upload

CVE-2026-16286

Critical · published August 25, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server.

This issue affects Software Repository Management: before 2fb4acee.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-08-25T19:16Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0899 · [email protected]
EPSS history
Timeline
  • 27 AUG 06:19Z
    EPSS moved — → 0%
    epss
  • 25 AUG 14:26Z
    File Upload in TRTEK Software's Software Repository Management
    cvelistv5