Unrestricted File Upload Vulnerability in TRtek Software Repository Management
CVE-2026-16286

9.8CRITICAL

Key Information:

Vendor

Trtek Technological Products Computer Software Hardware Industry And Trade Limited Company

Status
Software Repository Management
Vendor
CVE Published:
25 August 2026

What is CVE-2026-16286?

The vulnerability in TRtek Software Repository Management allows an attacker to upload files with dangerous types, potentially leading to the execution of a web shell on the server. This security flaw arises due to insufficient validation of uploaded files, which can compromise the integrity and functionality of the web server. It is crucial for users of the affected product to implement appropriate security measures and apply the necessary updates to mitigate the risk associated with this vulnerability.

Affected Version(s)

Software Repository Management 0 < 2fb4acee

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammet Talha ODABASI
Yunus KARA
Abdurrahman Emre OZKOK
.