Vulnerabilities CVE-2026-19383

CVE-2026-19383

Medium

Open

TLP:CLEAR

saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product is published by multiple vendors.

Details

CVSS Score: 5.1
EPSS Score ⓘ: 0.22%

12.6th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Confidence: 90%
Published: Aug 10, 2026
Last Modified: Aug 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.