CVE-2026-39589

CriticalCVSS 9.9

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

In Webenvo versions <= 0.0.6, there is a vulnerability that allows subscribers to upload arbitrary files.

An attacker could exploit this vulnerability to upload malicious software, potentially compromising the system.

It is recommended to upgrade to the latest version of Webenvo to mitigate this vulnerability.

Original NVD description (English source)

Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.