CVE-2026-92532 — Unrestricted Upload of File with Dangerous Type in BugTracker.NET
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configura…
Published: 2026-10-07 · CVSS: 7.5 · CVSS 4.0
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server. A successful exploit could allow arbitrary code execution with the privileges of the account used by the web service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7