CVE-2026-19852: CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload
Published Aug 24, 2026
·Updated
NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting.
Affected Software
1 affected component
CyberTutor NewSiteServer (NSS)
Event History
Aug 24, 2026
CVE Published
via MITRE·03:35 AM
Data Sourced
via MITRE·03:35 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit it. No account or prior privileges are required, but exploitation requires user interaction.
2
What can an attacker upload and what is the likely impact?
An attacker can upload arbitrary files, including malicious HTML files. This can produce effects similar to cross-site scripting, with potential confidentiality and integrity impact.
3
Is there a workaround if patching cannot happen immediately?
The provided information does not identify a workaround or mitigation.