CVE-2026-1358 — Airleader Master Unrestricted Upload of File with Dangerous Type
Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges. This could allow an unauthenticated user …
Published: 2026-02-12 · CVSS: 9.3 · CVSS 4.0
Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges. This could allow an unauthenticated user to potentially obtain remote code execution on the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7