CVE-2026-60045: Arbitrary file upload
Published Nov 10, 2026
·Updated
A high privileged remote attacker can upload arbitrary files to a guessable location. This can result in a loss of availability and might be chained with other vulnerabilities.
Event History
Nov 10, 2026
CVE Published
via MITRE·08:38 AM
Data Sourced
via MITRE·08:38 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be remote and already hold high privileges. No user interaction is required, and the attack complexity is low.
2
What is the primary impact of a successful exploit?
The stated direct impact is loss of availability. The issue may also be chained with other vulnerabilities, but no specific chained impact is provided.
3
What should defenders consider if immediate remediation is not possible?
Limit high-privilege remote access to trusted administrators and restrict exposure of the affected service where possible. Monitor for unexpected file uploads in predictable or guessable storage locations.