Description
A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Beijing Meite Software Technology | U+Smart Enjoyment WebSite | 18.6001.1096.1000 | — |
References
- VDB-399431 | Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload vdb-entry technical-description
- VDB-399431 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-86272 | CVE Analysis and Report third-party-advisory
- Submit #904145 | Beijing Meite Software Technology Co., Ltd. U+Smart Enjoyment WebSite 18.6001.1096.1000 CWE-434 (Unrestricted Upload of File with Dangerous Type) third-party-advisory
- https://ucn9h68n9289.feishu.cn/wiki/IYaowPR6licbC3kdw3xcJpQ7n6b?from=from_copylink exploit