Threats tagged 'ghsa-29wf-fqv4-q567'

A security vulnerability (CVE-2026-19383) exists in saithink/saigroup SaiAdmin up to version 5.0.1. It affects the shell_exec function in the /app/saipackage/install/upload file within the Plugin Upload Endpoint component, allowing unrestricted upload. The vulnerability can be exploited remotely. The exploit has been publicly disclosed but there are no known exploits in the wild. The severity is rated low with a CVSS score of 4.7.