Unrestricted File Upload Vulnerability in Shandong Hoteam InforCenter PLM

CVE-2026-5261

What is CVE-2026-5261?

A security vulnerability has been detected in Shandong Hoteam InforCenter PLM up to version 8.3.8, specifically in the function 'uploadFileToIIS' of the file '/Base/BaseHandler.ashx'. This flaw allows attackers to manipulate the 'File' argument, leading to unrestricted file uploads. Consequently, an attacker could remotely execute unauthorized commands or upload malicious files to the server. The existence of publicly available exploits enhances the risk, and despite early notifications, the vendor has not provided any response or remediation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References