CVE-2018-9206
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
CVSS
9.8
Critical
EPSS
97.3%
p100
KEV
—
Exploit Today
30
0-100
Published: Oct 11, 2018 · Last modified: Aug 12, 2026 · CWE-434
97.3%EPSS · 30 days97.3%
2026-09-212026-10-19
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
- www.securityfocus.comhttp://www.securityfocus.com/bid/105679
- www.securityfocus.comhttp://www.securityfocus.com/bid/106629
- www.vapidlabs.comhttp://www.vapidlabs.com/advisory.php?v=204
- wpvulndb.comhttps://wpvulndb.com/vulnerabilities/9136
- www.exploit-db.comhttps://www.exploit-db.com/exploits/45790/
- www.exploit-db.comhttps://www.exploit-db.com/exploits/46182/
- www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- www.securityfocus.comhttp://www.securityfocus.com/bid/105679
- www.securityfocus.comhttp://www.securityfocus.com/bid/106629
- www.vapidlabs.comhttp://www.vapidlabs.com/advisory.php?v=204
- github.comhttps://github.com/psolom/RichFilemanager/issues/354
- github.comhttps://github.com/psolom/RichFilemanager/issues/412
- wpvulndb.comhttps://wpvulndb.com/vulnerabilities/9136
- www.exploit-db.comhttps://www.exploit-db.com/exploits/45790/
- www.exploit-db.comhttps://www.exploit-db.com/exploits/46182/
- www.oracle.comhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1133936.3 MED—
———A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument upload_path/upload_name can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.5.1.7 is capable of addressing this issue. It is advisable to upgrade the affected component. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.6hCVE-2026-1133826.3 MED—
———A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api_plugins.php of the component Plugin Installer. Such manipulation of the argument plugin_file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.0.1 can resolve this issue. The name of the patch is 04573681420295f7b327c9da3b101aed2f3cf432. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.9hCVE-2026-1071889.6 CRI—
——0A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this vulnerability to run code on the server without authentication.23hCVE-2026-1121497.3 HIG—
——0A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move_uploaded_file of the file home.php. The manipulation of the argument my_img leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.23hCVE-2026-1114069.9 CRI—
——0Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.1dCVE-2026-1113118.8 HIG42.7%
——13The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the store_upload function. This is due to a fail-open extension allow-list in extension_is_allowed() that returns true when wp_check_filetype() yields an empty type for unrecognized extensions such as .php, combined with magic-byte-only MIME detection and no capability check beyond is_user_logged_in(). This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. Exploitation requires the Helpdesk module to be enabled, as the vulnerable REST endpoint is only registered when that module is active.4d