VULNERABILITY INTELLIGENCE

CVE-2026-33273

CVSS score5.1 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-04-08
Last modified2026-07-24
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Description

Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references