CVE-2026-6885
CriticalSummary
Borg SPM 2007, developed by BorG Technology Corporation, has an arbitrary file upload vulnerability, allowing unauthenticated remote attackers to upload and execute malicious scripts on the server.
Risk Assessment
Attackers can gain full control over the server, posing a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to immediately disable or remove the vulnerable version of the software and implement security measures to prevent unauthorized file uploads.
Original NVD description (English source)
Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.