Threats tagged 'ghsa-gxwg-rq6m-77m2'

CVE-2026-7673 is a vulnerability in crmeb_java up to version 1.3.4 affecting the Admin Upload component. It allows remote attackers with high privileges to perform unrestricted file uploads by manipulating the argument model in UploadServiceImpl.java. The vulnerability has a medium severity score of 4.7 and public exploit code is available. The vendor has not responded to disclosure and no patch information is provided.