The vulnerability identified as CVE-2026-6211 in WEOLL software from Global IT Informatics Services Inc. involves unrestricted upload of files with dangerous types, categorized under CWE-434. This weakness enables attackers with limited privileges to bypass access control restrictions and upload malicious files, which can compromise confidentiality and integrity of the system. The affected version explicitly stated is 2.0.9. The CVSS v3.1 base score is 8.7, indicating high severity, with network attack vector, low attack complexity, requiring privileges and user interaction, and resulting in a scope change with high confidentiality and integrity impact but no availability impact. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation allows an attacker with some privileges and user interaction to upload files of dangerous types without proper restriction, leading to unauthorized access to functionality and potentially full compromise of confidentiality and integrity of the affected system. Availability is not impacted. The vulnerability affects version 2.0.9 of WEOLL.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions and monitor for suspicious upload activity as a precaution. Avoid granting unnecessary privileges to users who can upload files.