Unrestricted File Upload Vulnerability in VITEC EZ TV Platform Server

CVE-2026-82504

What is CVE-2026-82504?

The VITEC EZ TV Platform Server prior to version 8.5.0 is susceptible to an unrestricted file upload vulnerability in its upload handler. This flaw allows remote attackers, without any form of authentication, to upload arbitrary files simply by providing a target filename through the X-FILENAME request header. The vulnerability poses a risk of remote code execution, as attackers can upload malicious files, such as an ASPX file, to the web-accessible uploads directory where they can be executed by the web server. Users are advised to upgrade to version 8.5.0 or above to mitigate this risk.

References