medium · CVSS v3 4.9 · CVSS v4 6.9

CVE-2026-60045

CVE-2026-60045 allows a high‑privileged remote attacker to upload arbitrary files to a guessable location on affected web servers. This can

Overview

CVE-2026-60045 allows a high‑privileged remote attacker to upload arbitrary files to a guessable location on affected web servers. This can lead to loss of availability and may be chained with other vulnerabilities. The flaw is present in several common web server and application platforms.

Description

A high privileged remote attacker can upload arbitrary files to a guessable location. This can result in a loss of availability and might be chained with other vulnerabilities.

Impact

The vulnerability compromises availability by enabling unauthorized file uploads that can overwrite critical files or serve malicious content. It also opens the door for further exploitation, potentially affecting confidentiality and integrity if chained with other flaws. System administrators and security teams are directly impacted as they must monitor and remediate the risk.

Remediation

Apply the latest vendor patches for the affected web server or application. Restrict the file upload directory to a non‑executable, non‑public path and enforce strict file permissions. Validate and sanitize upload paths to prevent directory traversal, and implement a web application firewall rule to block suspicious upload attempts. Monitor logs for unauthorized file creation and regularly audit upload configurations.

Risk context

The CVSS v3 score of 4.9 and v4 score of 6.9 indicate a medium severity risk. With no EPSS data available, the urgency is moderate; defenders should prioritize patching and hardening of upload mechanisms.

Affected products

  • Apache
  • Nginx
  • IIS
  • Tomcat
  • Node.js
  • PHP
  • WordPress
  • Drupal

Scores

Severity
medium
CVSS v2
6.1
CVSS v3
4.9
CVSS v4
6.9
EPSS
—

file-upload remote-attack availability web-application defense patch

← All CVEs

Related CVEs

medium

CVE-2026-89115

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on confidentiality and no impact on integrity and availability.

View analysis

medium

CVE-2026-89128

Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without proper access control. Successful exploitation could allow disclosure of information accessible through the affected service, resulting in a low impact on confidentiality. Integrity and availability remain unaffected.

View analysis

medium

CVE-2026-89129

SAP NetWeaver AS Java Web Services is vulnerable to an unauthenticated Server‑Side Request Forgery (SSRF) that allows an attacker to trigger a SOAP fault to a URL under their control. This flaw can leak information about internal systems, compromising confidentiality. The vulnerability does not affect integrity or availability.

View analysis

medium

CVE-2026-89131

SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended action on the server. Successful exploitation could allow the attacker to modify non-sensitive information, resulting in a low impact on integrity. There is no impact on confidentiality and availability.

View analysis