CVE-2026-82915
MediumCVSS 6.5Summary
Path Traversal vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows an attacker to access files outside the restricted directory. Affects versions from 6.7.141 before 10.0.11.
Risk Assessment
An attacker could read or modify sensitive system files, potentially leading to data confidentiality and integrity breaches.
Recommendation
Upgrade the system to version 10.0.11 or later immediately, which includes a fix for this vulnerability.
Other vulnerabilities in EBA Plus Document and Workflow Management System
See all- CVE-2026-85134High
An unrestricted upload of a file with a dangerous type vulnerability exists in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System, allowing upload of a web shell to a web server. This affects versions from 6.7.141 before 10.0.11.
- CVE-2026-82969Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.
Original NVD description (English source)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS