Unrestricted File Upload Vulnerability in Wuxi Wubang Security Software
CVE-2026-129262

6.9MEDIUM

Key Information:

Vendor: Wuxi Wubang Security Software
Status: Wubang Five-in-one Safety Production Management Information System
Vendor: CVE Published:; 14 November 2026

🔔 Create Wuxi Wubang Security Software Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-129262?

A critical security weakness has been discovered in the Wubang Five-in-One Safety Production Management Information System, affecting versions up to 3.5. The vulnerability lies within the DiyFileUpload function of the /ws.asmx file, allowing attackers to upload files without restriction. This flaw poses a serious risk as it can be exploited remotely, enabling unauthorized access and potential harm. Despite early notification efforts directed at the vendor, no response has been received, raising concerns about the urgency of patching this exploit.

Affected Version(s)

Wubang Five-in-One Safety Production Management Information System 3.0

Wubang Five-in-One Safety Production Management Information System 3.1

Wubang Five-in-One Safety Production Management Information System 3.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-129262 - Proof of Concept