THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-90500 (MEDIUM 6.3) — A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried o

[NVD] CVE-2026-90500 (MEDIUM 6.3) — A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried o

mednvdPublished 2026-09-13

CVE-2026-90500 CVSS: 6.3 MEDIUM Published: 2026-09-13T08:16:25.980

A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made available to

Indicators of compromise

CVE-2026-90500cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-90500