CVE-2026-40772
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
GeekyBot versions up to 1.2.2 have a vulnerability allowing unauthenticated arbitrary file uploads.
Risk Assessment
An attacker could exploit this vulnerability to upload malicious files, potentially leading to system compromise.
Recommendation
It is recommended to update GeekyBot to the latest version to mitigate this vulnerability.
Other vulnerabilities in GeekyBot
See all- CVE-2026-57679Critical
GeekyBot versions up to 1.2.5 are vulnerable to unauthenticated SQL injection. An attacker can remotely execute arbitrary SQL queries without authentication.
- CVE-2026-39519Critical
GeekyBot versions up to 1.2.0 are vulnerable to unauthenticated SQL injection, which may lead to unauthorized access to the database.
- CVE-2026-61965High
The GeekyBot plugin versions up to 1.2.6 contain a Cross-Site Scripting (XSS) vulnerability that can be exploited without authentication.
Original NVD description (English source)
Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS