CVE-2026-57658 is an administrator-level arbitrary file upload vulnerability affecting TemplateSpare versions <= 4.2.0. It is identified as CWE-434 (Unrestricted Upload of File with Dangerous Type). The vulnerability allows an attacker with administrative privileges to upload arbitrary files, which can lead to full system compromise including confidentiality, integrity, and availability impacts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker with administrative privileges to upload arbitrary files, potentially leading to complete compromise of the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, administrators should monitor vendor communications for updates and consider restricting administrator file upload capabilities or applying compensating controls until a fix is available.