CVE-2026-91844: CWE-434 Unrestricted upload of file with dangerous type in İzometri IT Services Domestic and Foreign Trade Co. Ltd. eimzamip

The vulnerability identified as CVE-2026-91844 corresponds to CWE-434, which is an unrestricted upload of files with dangerous types in the eimzamip product by İzometri IT Services Domestic and Foreign Trade Co. Ltd. This flaw allows an attacker with limited privileges (PR:L) and requiring user interaction (UI:R) to upload malicious files remotely (AV:N) with low attack complexity (AC:L). The vulnerability impacts confidentiality and integrity with high severity (CVSS 7.3) but does not affect availability. The affected versions are >=1.6.4 and <1.6.6.

Successful exploitation can lead to high confidentiality and integrity impacts, potentially allowing attackers to use malicious files to compromise the system or data. There is no known exploitation in the wild at this time.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official vendor communications for updates and apply any official fixes once available.