Threats Tagged 'cve-2026-1791'

CVE-2026-1791 is a vulnerability in Hillstone Networks Operation and Maintenance Security Gateway version V5.5ST00001B113 that allows unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to the web server. The vulnerability is categorized under CWE-434 and affects Linux-based deployments of the product. Although the CVSS score is low (2.7) due to the requirement of high privileges and no direct impact on confidentiality or integrity, it can cause availability issues by allowing denial of service or unauthorized code execution. No known exploits are currently reported in the wild. European organizations using this product should be aware of the risk, especially those with critical infrastructure relying on Hillstone security gateways. Mitigation involves applying vendor patches once available, restricting file upload permissions, and monitoring for suspicious file uploads. Countries with higher adoption of Hillstone products and strategic infrastructure reliance on these gateways, such as Germany, France, and the UK, are more likely to be affected. Overall, the threat is low severity but should be addressed promptly to prevent potential exploitation.

LowVulnerabilityGermanyFranceNetherlands+3#cve#cve-2026-1791#cwe-434