CVE-2026-1791CWE-434

Arbitrary File Upload Vulnerability in Operation and Maintenance Security Gateway

Low · published February 4, 2026

CVSS v3.1
2.7
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

Unrestricted Upload of File with Dangerous Type vulnerability in Hillstone Networks Operation and Maintenance Security Gateway on Linux allows Upload a Web Shell to a Web Server.This issue affects Operation and Maintenance Security Gateway: V5.5ST00001B113.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-02-04T03:11Z
EPSS history
Timeline
  • 04 FEB 03:11Z
    Arbitrary File Upload Vulnerability in Operation and Maintenance Security Gateway
    cvelistv5