VULNERABILITY INTELLIGENCE

CVE-2022-50893

CVSS score9.3 CRITICAL
EPSS probability0.99%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

VIAVIWEB Wallpaper Admin 1.0 contains an unauthenticated remote code execution vulnerability in the image upload functionality. Attackers can upload a malicious PHP file through the add_gallery_image.php endpoint to execute arbitrary code on the server.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references