CVE-2026-70356

CRITICAL9.1

Published 2026-09-29 · Source ics-cert@hq.dhs.gov

Description

The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-434

References

View on NVD

Related CVEs

Same severity, most recent

CVE-2026-72510
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
2026-09-29 · score 9.0
CVE-2026-72507
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.
2026-09-29 · score 9.0
CVE-2026-71379
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.
2026-09-29 · score 10.0
CVE-2026-68954
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.
2026-09-29 · score 9.0
CVE-2026-68068
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.
2026-09-29 · score 9.0