Description
Airleader Master versions 6.381 and prior allow for file uploads without
restriction to multiple webpages running maximum privileges. This could
allow an unauthenticated user to potentially obtain remote code
execution on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Airleader | Airleader Master | ≤ 6.381 | — |
Advisories 1
- ICSA-26-043-10 Airleader Master CISA ICS & IT advisories · Feb 12, 2026