CVE Catalog
CVE-2026-67678
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.59%
45th percentile - higher than 45% of all known CVEs
Summary
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code.
Risk Assessment
An attacker can upload a malicious file that gets executed on the server, potentially leading to system takeover or data theft.
Recommendation
Update DocSys to the latest version and implement file type validation and restrictions on executing uploaded files.
Original NVD description (English source)
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code