CVE-2026-82504
Unauthenticated arbitrary file upload RCE in VITEC EZ TV before 8.5.0
- CVSS 4.0
- 9.3 critical
- EPSS
- —
- Published
- ·
- Modified
VITEC EZ TV Platform Server before 8.5.0 has an unrestricted file upload flaw in its upload handler. An unauthenticated remote attacker can set a target name in the X-FILENAME header and upload an ASPX file into the web-accessible uploads directory with no authentication or file-type checks. The server executes that file as the web server process, giving remote code execution.
What to do: Apply the patches for 8.3.0, 8.3.1, 8.4.0, and 8.4.1. Releases before 8.3.0 should upgrade to 8.5.0 or later.
| Product | Affected | Fixed in |
|---|---|---|
| VITEC EZ TV Platform Server | before 8.5.0 | Patches for 8.3.0, 8.3.1, 8.4.0, and 8.4.1; 8.5.0+ for releases prior to 8.3.0 |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
VITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file upload vulnerability in the upload handler that allows unauthenticated remote attackers to upload arbitrary files by supplying a target filename in the X-FILENAME request header with no authentication or file type validation required. Attackers can upload a malicious ASPX file directly to the web-accessible uploads directory, where it is immediately executable by the web server, achieving remote code execution in the context of the web server process. Patches are available for versions 8.3.0, 8.3.1, 8.4.0, and 8.4.1. Users running releases prior to 8.3.0 should upgrade to 8.5.0+.
- Weakness
- CWE-306, CWE-434
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news
0 storiesNo ingested article mentions this CVE yet.