CVE-2026-67243: freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upl
freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-67243
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-67243 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
More from NVD Recent CVEs
- unknownCVE-2026-18759: The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based i…2026-08-04
- highCVE-2026-18755: A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write acc…2026-08-04
- criticalCVE-2026-18754: The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web…2026-08-04
- criticalCVE-2026-18753: The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web…2026-08-04
- unknownCVE-2026-64565: In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix heap-…2026-08-04