A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions <… (CVE-2026-50093)
A vulnerability exists in multiple versions of Siveillance Control Pro and Siveillance Control products prior to specific fixed versions. The flaw is in the OIS web module and allows an attacker to upload arbitrary files to the server. Exploitation could lead to root access on the host system, potentially resulting in full compromise of the affected environment.
AI Analysis
Technical Summary
CVE-2026-50093 is a high-severity vulnerability affecting Siveillance Control Pro V3.0 (all versions before 3.0.12.2173), Siveillance Control Pro V4.0 (all versions before 4.0.9.2178), Siveillance Control V3.0 (all versions before 3.0.22.2177), and Siveillance Control V4.0 (all versions before 4.0.11.2177). The vulnerability resides in the OIS web module and permits an attacker to upload arbitrary files to the server. Successful exploitation can grant root access to the attacker, potentially leading to a complete compromise of the affected system. The CVSS v3.1 score is 9.0, indicating a critical impact with network attack vector requiring low privileges and no user interaction.
Potential Impact
An attacker exploiting this vulnerability can upload arbitrary files to the server hosting the OIS web module, which may allow them to escalate privileges to root on the host system. This could lead to full system compromise, including unauthorized access, data theft, and disruption of services within the affected Siveillance environment.
Mitigation Recommendations
Fixed versions are available for all affected products: Siveillance Control Pro V3.0 versions from 3.0.12.2173 onward, Siveillance Control Pro V4.0 versions from 4.0.9.2178 onward, Siveillance Control V3.0 versions from 3.0.22.2177 onward, and Siveillance Control V4.0 versions from 4.0.11.2177 onward. Users should upgrade to these versions to remediate the vulnerability. No additional mitigation guidance is provided in the source data.
A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions <… (CVE-2026-50093)
Description
A vulnerability exists in multiple versions of Siveillance Control Pro and Siveillance Control products prior to specific fixed versions. The flaw is in the OIS web module and allows an attacker to upload arbitrary files to the server. Exploitation could lead to root access on the host system, potentially resulting in full compromise of the affected environment.
CVSS v3.1
Score 9.0critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-50093 is a high-severity vulnerability affecting Siveillance Control Pro V3.0 (all versions before 3.0.12.2173), Siveillance Control Pro V4.0 (all versions before 4.0.9.2178), Siveillance Control V3.0 (all versions before 3.0.22.2177), and Siveillance Control V4.0 (all versions before 4.0.11.2177). The vulnerability resides in the OIS web module and permits an attacker to upload arbitrary files to the server. Successful exploitation can grant root access to the attacker, potentially leading to a complete compromise of the affected system. The CVSS v3.1 score is 9.0, indicating a critical impact with network attack vector requiring low privileges and no user interaction.
Potential Impact
An attacker exploiting this vulnerability can upload arbitrary files to the server hosting the OIS web module, which may allow them to escalate privileges to root on the host system. This could lead to full system compromise, including unauthorized access, data theft, and disruption of services within the affected Siveillance environment.
Mitigation Recommendations
Fixed versions are available for all affected products: Siveillance Control Pro V3.0 versions from 3.0.12.2173 onward, Siveillance Control Pro V4.0 versions from 4.0.9.2178 onward, Siveillance Control V3.0 versions from 3.0.22.2177 onward, and Siveillance Control V4.0 versions from 4.0.11.2177 onward. Users should upgrade to these versions to remediate the vulnerability. No additional mitigation guidance is provided in the source data.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2rpg-jwp8-r64m
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-50093"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6aa005a9acd9273b49ab467e
Added to database: 09/08/2026, 12:55:05 UTC
Last enriched: 09/08/2026, 13:00:45 UTC
Last updated: 09/08/2026, 16:52:00 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.