cve.bz

CVE-2026-6211

8.7 highEPSS 0.2%

Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WEOLL: from 2.0.9 before 3.2.45.33.

CVSS 3.1
8.7CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-25)
CWE
CWE-434
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON