CVE Catalog
CVE-2026-50768
CriticalCVSS 9.8Summary
File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.
Risk Assessment
An attacker could upload a malicious file and execute arbitrary code on the server, potentially leading to full system compromise.
Recommendation
Apply vendor-provided patches and restrict access to file upload functionality.
Original NVD description (English source)
File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.