CVE-2026-67678

CriticalCVSS 9.8

Published: 17/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code.

An attacker can upload a malicious file that gets executed on the server, potentially leading to system takeover or data theft.

Update DocSys to the latest version and implement file type validation and restrictions on executing uploaded files.

Original NVD description (English source)

File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code