CVE-2026-10172
Last modified
CVE-2026-10172 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/controllers/Module.php of the component Component Module. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/controllers/Module.php of the component Component Module. The manipulation of the argument module results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-10172?
How severe is CVE-2026-10172?
How do I fix CVE-2026-10172?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-10166A vulnerability was determined in Edimax BR-6478AC 1.23. The…6.3
- CVE-2026-10167A weakness has been identified in OUSL-GROUP-BrinaryBrains S…7.3
- CVE-2026-10168A security vulnerability has been detected in OUSL-GROUP-Bri…6.3
- CVE-2026-10169A vulnerability was detected in OUSL-GROUP-BrinaryBrains Sch…3.7
- CVE-2026-10170A flaw has been found in code-projects Visitor Management Sy…6.3
- CVE-2026-10171A vulnerability has been found in code-projects Online Music…4.7
- CVE-2026-10173A weakness has been identified in Orthanc Explorer 2 up to 1…4.3
- CVE-2026-10174A vulnerability was identified in Aider-AI Aider 0.86.3. Aff…6.3
- CVE-2026-10175A security flaw has been discovered in Aider-AI Aider 0.86.3…6.3
- CVE-2026-10176A weakness has been identified in Aider-AI Aider 0.86.3. Aff…6.3
- CVE-2026-10177A security vulnerability has been detected in Aider-AI Aider…6.3
- CVE-2026-10178A vulnerability was detected in code-projects Online Music S…7.3
Are you affected by CVE-2026-10172?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST