File Upload Vulnerability in T-Systems ImageMaster Software
CVE-2026-50768

8.8HIGH

Key Information:

Vendor

T-Systems International GmbH

Status
ImageMaster
Vendor
CVE Published:
17 August 2026

What is CVE-2026-50768?

A file upload vulnerability exists in T-Systems International GmbH's ImageMaster, specifically in version 9.14.2.8.1. This vulnerability allows remote attackers to execute arbitrary code by manipulating the add attachments feature within the 'create new document' function. If exploited, this could lead to unauthorized access and control over the affected system, posing significant security risks to users and organizations. It's critical for users to ensure their software is updated and to implement stringent security measures.

References

https://www.t-systems.com/in/en/content-and-collaboration...
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2026...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.