CVE-2026-39757

CriticalCVSS 9.9

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Summary

The vulnerability allows a subscriber to perform arbitrary file upload in Taskbot up to version 6.6.

A subscriber can upload malicious files, potentially leading to server integrity compromise or unauthorized operations.

Update the Taskbot plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS