VULNERABILITY INTELLIGENCE
CVE-2026-19383
CVSS score4.7 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-08-10
Last modified2026-08-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Description
A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product is published by multiple vendors.
Weakness classification
- cna@vuldb.com: CWE-284