CVE-2026-21628

File Management Feature - Unauthenticated RCE

Title source: llm

Description

A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.

Scores

EPSS 0.0021
EPSS Percentile 43.0%

Classification

CWE
CWE-434
Status draft

Timeline

Published Mar 05, 2026
Tracked Since Mar 05, 2026