CVE-2026-74845
Last modified
CVE-2026-74845 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server..
Description
Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| 2100 Technology | Official Document Management System | < 5.0.105 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-74845?
How severe is CVE-2026-74845?
How do I fix CVE-2026-74845?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-7482Ollama before 0.17.1 contains a heap out-of-bounds read vuln…9.1
- CVE-2026-7483Local privilege escalation potentially allowed an attacker t…8.5
- CVE-2026-74836Allocation of Resources Without Limits or Throttling vulnera…8.7
- CVE-2026-7484External control of Assumed-Immutable web parameter vulnerab…5.3
- CVE-2026-74842A vulnerability was found in Kira-Pgr PromptShopMCP up to 5b…6.3
- CVE-2026-74843A vulnerability was determined in Wavlink WN531P3 and WN535M…10
- CVE-2026-7485Incorrect authorization in frozen BI aggregations in Checkmk…2.3
- CVE-2026-74858A vulnerability has been found in jae-jae fetcher-mcp up to …6.3
- CVE-2026-7486Improper neutralization of special elements used in an SQL c…9.8
- CVE-2026-74866@fastify/busboy is a multipart form-data parser for Node.js.…5.8
- CVE-2026-74867SiYuan versions before 3.7.4 contain a cross-site request fo…4.2
- CVE-2026-74868SiYuan versions before 3.7.4 contain an unthrottled brute-fo…7.5
Are you affected by CVE-2026-74845?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST