CVE-2026-92532
HighCVSS 7.5Summary
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server.
Risk Assessment
An attacker could execute arbitrary code on the server with the privileges of the account used by the web service, potentially leading to full system compromise.
Recommendation
Update BugTracker.NET to a version that includes a fix for file extension validation and upload restrictions.
Other vulnerabilities in BugTracker.NET
See all- CVE-2026-92533High
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory.
- CVE-2026-92531High
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality.
Original NVD description (English source)
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server. A successful exploit could allow arbitrary code execution with the privileges of the account used by the web service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS