CVE-2026-67688

17th percentile - higher than 17% of all known CVEs

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module, allowing a remote attacker to execute arbitrary code.

An attacker can upload malicious files such as webshells and achieve remote code execution on the server, potentially leading to full system compromise.

Restrict allowed file types, implement content and extension validation, and ensure uploaded files are stored outside the public directory and not executed by the server.