CVE-2026-6885
CriticalSummary
Borg SPM 2007, developed by BorG Technology Corporation, has an arbitrary file upload vulnerability, allowing unauthenticated remote attackers to upload and execute malicious scripts on the server.
Risk Assessment
Attackers can gain full control over the server, posing a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to immediately disable or remove the vulnerable version of the software and implement security measures to prevent unauthorized file uploads.
Other vulnerabilities in Borg SPM 2007
See all- CVE-2026-6887Critical
Borg SPM 2007, developed by BorG Technology Corporation, has a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- CVE-2026-6886Critical
Borg SPM 2007, developed by BorG Technology Corporation, has an authentication bypass vulnerability that allows unauthenticated remote attackers to log into the system as any user.
Original NVD description (English source)
Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS