CVE-2026-85134
HighCVSS 8.8Summary
An unrestricted upload of a file with a dangerous type vulnerability exists in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System, allowing upload of a web shell to a web server. This affects versions from 6.7.141 before 10.0.11.
Risk Assessment
An attacker can upload a malicious file and achieve remote code execution on the server, leading to full system compromise and data leakage.
Recommendation
Upgrade eBA Plus Document and Workflow Management System to version 10.0.11 or later and restrict the ability to upload executable files.
Other vulnerabilities in eBA Plus Document and Workflow Management System
See all- CVE-2026-82969Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.
- CVE-2026-82915Medium
Path Traversal vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows an attacker to access files outside the restricted directory. Affects versions from 6.7.141 before 10.0.11.
Original NVD description (English source)
Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS