Arbitrary File Upload in Basarsoft's Rotaban
CVE-2026-11839

9.9CRITICAL

Key Information:

Vendor

Başarsoft Information Technologies Inc.

Status
Rotaban
Vendor
CVE Published:
11 June 2026

What is CVE-2026-11839?

Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server.

This issue affects Rotaban: from V2026.06.002 before V2026.06.003.

Affected Version(s)

Rotaban V2026.06.002

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mehmet MURAT
.