CVE-2021-35261

9.8 criticalEPSS 0.8%

Critical (9.8) in bearadmin project bearadmin. EPSS 0.8% chance of exploitation in the next 30 days.

File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bearadmin_project:bearadmin

References

https://github.com/yupoxiong/BearAdmin/issues/16
https://github.com/yupoxiong/BearAdmin/issues/16

Check your stack JSON