CVE-2026-8758

Published May 17, 2026 · Source: nvd

Analysis

## Summary
A vulnerability in Metasoft 美特软件 MetaCRM affects deployments up to 6.4.0 Beta06. It involves /common/jsp/upload3.jsp, where manipulating the File argument can result in unrestricted upload, and the attack can be launched remotely.

The issue is publicly disclosed and may be utilized.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness

CWE-284

References

• [email protected]
• [email protected]
• [email protected]
• [email protected]

← Browse all CVEs