CVE-2024-50660 is a critical remote code execution vulnerability in AdPortal 3.0.39 caused by a file upload bypass. An attacker can exploit the file upload functionality to execute arbitrary code on the affected system without authentication. This vulnerability is categorized under CWE-94, which involves improper control over code generation. The CVSS 3.1 base score of 9.8 reflects its critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and full impact on confidentiality, integrity, and availability. No patch or fix information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows remote attackers to execute arbitrary code on the vulnerable AdPortal 3.0.39 system, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the system. Given the critical CVSS score, the impact is severe and could result in unauthorized control over the affected server.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the file upload functionality, implement strict input validation and filtering on uploaded files, and monitor for suspicious activity related to file uploads. Avoid exposing the vulnerable version to untrusted networks.