CVE-2026-32989 is a CSRF vulnerability in Precurio Intranet Portal 4.4 that targets a profile update endpoint responsible for file uploads. Attackers can induce authenticated users to unknowingly submit malicious requests that upload executable files to locations accessible via the web server. This can lead to arbitrary code execution under the privileges of the web server process. The vulnerability combines CWE-352 (CSRF) and CWE-434 (Unrestricted File Upload). It has a CVSS v4.0 base score of 8.6, indicating high severity. No patch or official fix has been documented, and the product is not a cloud service.

Exploitation of this vulnerability allows attackers to execute arbitrary code on the web server by uploading malicious executable files through a CSRF attack. This can compromise the confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the potential for significant impact if exploited. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider implementing CSRF protections such as anti-CSRF tokens on the affected endpoints and restrict file upload types and locations if possible. Monitoring for suspicious file uploads and limiting user privileges may also reduce risk, but these are interim measures.