CVE-2026-52101

CriticalCVSS 9.1

Published: 14/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

A vulnerability in the Linux server by andreimarcu versions 1.0 through 2.3.8 allows a remote attacker to obtain sensitive information via the uploadRemote function in upload.go.

Risk Assessment

An attacker can remotely intercept confidential data transmitted or stored by the server, leading to information disclosure and security breach for the organization.

Recommendation

Immediately update the Linux server to a version later than 2.3.8 where the vulnerability is fixed, or apply the available security patch.

Original NVD description (English source)

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go