High (7.5) in emca energy logserver. EPSS 2.4% chance of exploitation in the next 30 days.
The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter.
Severity
CVSS 3.0
7.5 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)