CVE-2026-74845
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
The Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Risk Assessment
An attacker can gain full control of the server, potentially leading to data theft, system modification, or further attacks.
Recommendation
Apply patches provided by the vendor and restrict access to the system to trusted users only.
Original NVD description (English source)
Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.