CVE-2026-15553

MediumCVSS 5.3

Published: 13/07/2026(UTC)Updated: 14/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

An Arbitrary File Upload vulnerability in Ragic's Enterprise Cloud Database allows unauthenticated remote attackers to upload malicious files, which are then made available for users to download.

Risk Assessment

Attackers can exploit this vulnerability to distribute malware or steal data, posing a serious threat to system integrity and confidentiality.

Recommendation

Immediately update Enterprise Cloud Database to the latest version and implement file validation and filtering mechanisms.

Other vulnerabilities in Enterprise Cloud Database

CVE-2026-15552Medium
A Stored Cross-Site Scripting vulnerability exists in Ragic's Enterprise Cloud Database. Unauthenticated remote attackers can inject persistent JavaScript code that executes in users' browsers upon page load.

Original NVD description (English source)

Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload malicious files and make them available for users to download.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS