CVE-2026-91844

HighCVSS 7.3

Published: 08/10/2026(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6.

Risk Assessment

Uploading a malicious file may enable code execution or system infection, threatening the confidentiality and integrity of organizational data.

Recommendation

Upgrade Eimzamip to v1.6.6 or later and implement validation of uploaded file types and extensions.

Other vulnerabilities in Eimzamip

CVE-2026-89290Low
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS