CVE-2026-25099 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be exe…
High CVSS: 8.7

CVE-2026-25099

Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution.

This issue was fixed in 3.18.4.
Vendor
Bludit
Product
Bludit
CWE
CWE-434
Yayın Tarihi
2026-03-27 12:16:19
Güncelleme
2026-04-01 14:16:35
Source Identifier
cvd@cert.pl
KEV Date Added
-

Kategoriler

CWE-434 Bludit HIGH Bludit 2026

Referanslar

https://cert.pl/posts/2026/03/CVE-2026-25099 https://github.com/bludit/bludit/releases/tag/3.18.4