NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC ×41

CVE-2018-9206

CVSS 3.1: 9.8 critical
EPSS: 97%p100
Published: Oct 11, 2018 · Oct 11, 2018
Modified: Aug 12, 2026

Analyze CVE-2018-9206 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

Vendors: jquery file upload project

Products: jquery file upload

Weakness: CWE-434

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (97.3%)

In the news

3 stories

Crooks leverages .htaccess injector on Joomla and WordPress sites for malicious redirects

Security AffairsMay 27, 12:39 UTC · May 27, 2019Exploit / PoCCVE-2018-92062 · 1 read

60

Thousands of applications affected by a zero

Security AffairsOct 20, 08:38 UTC · Oct 20, 2018Exploit / PoCExploitedCVE-2018-92062 · 1 read

60

KashmirBlack, a new botnet in the threat landscape that rapidly grows

Security AffairsOct 26, 17:09 UTC · Oct 26, 2020MalwareCVE-2017-9841 CVE-2018-9206 CVE-2019-9194+41 · 1 read

47