[ CVE-2026-4337 · Published 27 Oct 2026 ]
Vulnerability in PuMuKIT
CVSS 8.8
EPSS <1%No fix listed yet
[ Description ]Official description
Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could also allow them to delete files.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.