CVE-2026-44097 — File Upload vulnerability
A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attack…
Published: 2026-07-30 · CVSS: 5.3 · CVSS 4.0
A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7