CVE-2026-16286

CriticalCVSS 9.8

Published: 25/08/2026(UTC)Translated: 25/08/2026(UTC)NVD NIST

Summary

Unrestricted upload of file with dangerous type vulnerability in TRtek Software Repository Management allows uploading a web shell to a web server. This issue affects versions before 2fb4acee.

Risk Assessment

An attacker can gain full control of the web server, potentially leading to system compromise, data theft, or further attacks.

Recommendation

Upgrade Software Repository Management to version 2fb4acee or later, which includes the fix.

Original NVD description (English source)

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee.