Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-85134

Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management System

Default version status: unaffected

  • 6.7.141 to < 10.0.11affected

References