CVE-2023-26578

—

CVSS 3.1

8.8 high

EPSS

1%p72

Published

Oct 25, 2023 (Oct 25, 2023)

Modified

Jun 17, 2026

Description

Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root such as ASP or ASPX, gaining command execution on the affected server.

Vendors: idattend
Products: idweb
Weakness: CWE-22, CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.