Unrestricted File Upload Vulnerability in kalcaddle Kodbox Software
CVE-2026-4830
Key Information:
Badges
What is CVE-2026-4830?
A significant security flaw exists in kalcaddle Kodbox version 1.64 that allows for unrestricted file uploads through the Public Share Handler component. The vulnerability is located in the Add function of the userShare.class.php file. This issue enables attackers to execute remote uploads without proper authorization, posing a severe risk to data security. Despite reports sent to the vendor, no response has been recorded, leaving systems potentially exposed to exploitation. The complexity of the attack is high, but the exploit is publicly available, making it essential for users to take immediate action to secure their installations.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
kodbox 1.64
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved