CVE-2026-40772

CriticalCVSS 10.0

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

26th percentile — higher than 26% of all known CVEs

GeekyBot versions up to 1.2.2 have a vulnerability allowing unauthenticated arbitrary file uploads.

An attacker could exploit this vulnerability to upload malicious files, potentially leading to system compromise.

It is recommended to update GeekyBot to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.