CVE-2026-22234 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values…
Critical CVSS: 9.3

CVE-2026-22234

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.
Vendor
Opexustech
Product
Ecase Portal
CWE
CWE-639
Yayın Tarihi
2026-01-08 18:16:00
Güncelleme
2026-02-18 14:05:09
Source Identifier
9119a7d8-5eab-497f-8521-727c672e3725
KEV Date Added
-

Kategoriler

CWE-639 Ecase Portal CRITICAL Opexustech 2026

Referanslar

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-02.json https://www.cve.org/CVERecord?id=CVE-2026-22234