CVE-2026-7395

HighCVSS 8.5

Published: 29/09/2026(UTC)Updated: 29/09/2026(UTC)Translated: 29/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet, which can be used for configuration file upload, leading to information disclosure and integrity compromise. The servlet is intended for testing in non-production environments.

Risk Assessment

Unauthorized access can lead to data leakage or configuration modification, threatening system security.

Recommendation

Restrict access to HTTPPublishAdapterTestServlet or disable it in production environments.

Other vulnerabilities in Asset Suite

CVE-2026-11796Medium
Asset Suite allows unauthenticated users to access PropertiesReloadServlet, CacheFlushServlet, MetadataCacheFlushServlet, and ResourceBundleReloadServlet, which could result in denial-of-service conditions affecting application availability.

Original NVD description (English source)

Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production environment.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS