Skip to main content
Apexward Pulse
4 reportsPriority Medium

Unrestricted file upload vulnerabilities

Multiple vulnerabilities allow attackers to upload malicious files to servers, posing a risk to UK organisations using affected systems.

First report Latest

What is going on

  • A vulnerability in Sierra Wireless AirLink ALEOS allows uploading executable files via HTTP requests, with reports of exploitation in the wild.
  • A PHP remote file inclusion flaw in Zimbra Collaboration Suite could let attackers influence internal processes through crafted requests.
  • SmarterMail has an unrestricted file upload issue that may let unauthenticated users place arbitrary files on mail servers.
  • ThreatSonar Anti-Ransomware was found to improperly validate uploaded files, with CISA noting active exploitation attempts.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed