Skip to content
OpenAdvisories
Critical · 9.9 CVE-2026-11839 EUVD-2026-36249GHSA-4r5w-3xv4-56jm

Arbitrary File Upload in Basarsoft's Rotaban

Published Jun 11, 2026 · Updated Jun 17, 2026 · Assigned by TR-CERT

Description

Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server.

This issue affects Rotaban: from V2026.06.002 before V2026.06.003.

Affected products

VendorProductAffectedFixed
Başarsoft Information Technologies Rotaban V2026.06.002 – < V2026.06.003 V2026.06.003

References