CVE-2026-85134CWE-434unrestricted-file-upload

CVE-2026-85134

High · published September 28, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server.

This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-09-28T13:17Z
References (1)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1197 · [email protected]
EPSS history
Timeline
  • 29 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 28 SEP 08:28Z
    Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus
    cvelistv5