CVE-2026-38450

CriticalCVSS 9.8

Published: 14/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

52th percentile - higher than 52% of all known CVEs

Summary

A vulnerability in Aetopia Digital Asset Management DAM version 1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameters of the Add/Update Project function.

Risk Assessment

An attacker could take control of the DAM server, steal or corrupt managed digital assets, and compromise the integrity of the entire system.

Recommendation

Immediately update the system to the latest version or apply a security patch, and restrict access to the Add/Update Project function to trusted users only.

Original NVD description (English source)

An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function