Carga sin restricciones de archivos en la aplicación PuMuKIT

Unrestricted Upload of File in PuMuKIT application Tue, 10/27/2026 - 14:15 Aviso Affected Resources PuMuKIT versions prior to 5.0.8. Description INCIBE has coordinated the publication of a high severity vulnerability affecting PuMuKIT application, an Open Source Video Platform. The vulnerability was discovered by David Herrero de la Peña. This vulnerability has been assigned the following code, CVSS v4.0 base score, CVSS vector and CWE vulnerability type: CVE-2026-4337: CVSS v4.0: 8.8 | CVSS AV…

Číst originál na INCIBE-CERT →

CZ · EN/orig

PuMuKIT ES

tg: zranitelnost

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-4337	8.8 4.0 · INCIBE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.8.