CVE-2026-27064 in Mailster Plugin

摘要

由 VulDB • 2026-07-23

Arbitrary file upload vulnerability in Mailster versions up to and including 4.1.17, allowing editors to upload arbitrary files.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 负责: Patchstack
• 预定: 2026-02-17
• 披露: 2026-07-23
• 管理: 已接受
• 条目: VDB-382535
• CPE: 准备好
• CWE: CWE-434 (已确认)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: 否
• 活动: 低
• 部门: Hostingprovider

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-27064
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-27064
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-27064/