CVE-2026-50768
CRITICAL
9,8
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.
434
Unrestricted Upload of File with Dangerous Type
DraftCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
Languages:
ASP.NET, PHP, Not Language-Specific
Technologies:
Web Server, AI/ML
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50768
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026-50768
https://www.t-systems.com/in/en/content-and-collaboration/solutions/enterprise-…