File Upload Vulnerability in Başarsoft Rotaban Product
CVE-2026-11839

9.9CRITICAL

Key Information:

Vendor

Başarsoft Information Technologies Inc.

Status
Rotaban
Vendor
CVE Published:
11 June 2026

What is CVE-2026-11839?

A vulnerability in Başarsoft Information Technologies Inc.'s Rotaban allows for unrestricted file uploads of harmful types, potentially enabling attackers to upload a web shell onto the server. This issue is present in Rotaban versions up to and including V2026.06.002, impacting the application's security integrity by providing malicious users with unauthorized access to execute scripts and control server functions.

Affected Version(s)

Rotaban V2026.06.002

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mehmet MURAT
.