CWE-434

4,226 vulnerabilities with CWE-434

CVE-2026-44566 HIGH

Open WebUI: Arbitrary File Upload and Path Traversal

CVSS 7.3

CVE-2026-44088 HIGH

Remote Code Execution in SzafirHost

CVE-2026-22707 MEDIUM

Strapi Upload Plugin MIME Validation Bypass via Content API

CVSS 5.4

CVE-2026-41937 HIGH

Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload

CVSS 7.2

CVE-2026-6271 CRITICAL

Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

CVSS 9.8

CVE-2026-45053 CRITICAL

CubeCart: Authenticated Arbitrary File Upload to RCE in REST Files API

CVSS 9.1

CVE-2026-37430 HIGH

qihang-wms 75c15a - Arbitrary File Upload

CVSS 7.3

CVE-2026-42844 HIGH

Grav: Low-privileged API users can create super-admin accounts via blueprint-upload

CVSS 8.8

CVE-2026-41517 NONE

Emlog: Remote Code Execution via Malicious Plugin Upload

CVE-2026-36387 MEDIUM

CODEASTRO Membership Management System 1.0 - Remote Code Execution

CVSS 6.5

CVE-2026-6692 HIGH

Slider Revolution 7.0.0 - 7.0.10 - Authenticated (Subscriber+) Arbitrary File Upload via _get_media_url

CVSS 8.8

CVE-2026-41587 HIGH

CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution

CVE-2026-41938 HIGH

Vvveb < 1.0.8.2 RCE via Media Upload Handler

CVSS 8.8

CVE-2026-6261 HIGH

Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload

CVSS 8.8

CVE-2026-38751 HIGH

OpenSTAManager <=2.10 - Arbitrary File Upload

CVSS 7.2

CVE-2026-7733 HIGH

funadmin Frontend Chunked Upload Endpoint UploadService.php chunkUpload unrestricted upload

CVSS 7.3

CVE-2026-7732 MEDIUM

code-projects BloodBank Managing System request_blood.php unrestricted upload

CVSS 6.3

CVE-2026-7711 HIGH

MindsDB Engine proc_wrapper.py exec unrestricted upload

CVSS 7.3

CVE-2026-7696 MEDIUM

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform uploadH5Files unrestricted upload

CVSS 6.3

CVE-2026-7673 MEDIUM

crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload

CVSS 4.7

CVE-2026-7490 HIGH

Sunnet｜CTMS and CPAS - Arbitrary File Upload

CVSS 7.2

CVE-2026-4882 CRITICAL

User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload

CVSS 9.8

CVE-2026-7578 MEDIUM

MacCMS Pro Plugin Installation add.html install unrestricted upload

CVSS 4.7

CVE-2026-7393 MEDIUM

SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

CVSS 4.7

CVE-2026-38991 HIGH

Cockpit <=2.13.5 - Authenticated RCE

CVSS 8.8