CVE-2026-33273

N/A

Beschreibung

Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht4/8/2026

Zuletzt geandert4/8/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-434

Referenzen

https://jvn.jp/en/jp/JVN33581068/(vultures@jpcert.or.jp)

https://oss.icz.co.jp/news/?p=1386(vultures@jpcert.or.jp)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.