CVE-2026-75496 in QloAppsinformazioni

Riassunto

di MITRE • 25/08/2026

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable files and achieve remote code execution. Fixed in 153ec1c.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Cisa-cg

Prenotare

17/08/2026

Divulgazione

25/08/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-75496
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-75496
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-75496/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!