Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-1358

Airleader Master Unrestricted Upload of File with Dangerous Type

Description

Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges. This could allow an unauthenticated user to potentially obtain remote code execution on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Airleader GmbH Airleader Master

Default version status: unaffected

  • 0 to ≤ 6.381affected

References