High · 8.8 CVE-2026-85134 EUVD-2026-88171GHSA-468q-55rr-hw4m

Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

Published Sep 28, 2026 · Updated Sep 28, 2026 · Assigned by TR-CERT

Vendor: Bimser Solution Software Trade Product: eBA Plus Document and Workflow Management System

Description

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server.

This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Affected products

Vendor	Product	Affected	Fixed
Bimser Solution Software Trade	eBA Plus Document and Workflow Management System	6.7.141 – < 10.0.11	10.0.11

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1197 government-resource