CVE Catalog
CVE-2026-80235
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.68%
50th percentile - higher than 50% of all known CVEs
Summary
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Risk Assessment
An attacker could gain full control of the server, compromising confidentiality, integrity, and availability.
Recommendation
Update EFence to the latest version. Restrict access to file upload functionality and implement file validation mechanisms.
Original NVD description (English source)
EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.