Unrestricted File Upload Vulnerability in Beijing Meite Software's U+Smart Enjoyment WebSite
CVE-2026-86272

6.9MEDIUM

Key Information:

Vendor: Beijing Meite Software Technology
Status: U+smart Enjoyment Website
Vendor: CVE Published:; 7 September 2026

🔔 Create Beijing Meite Software Technology Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-86272?

A vulnerability has been identified in the U+Smart Enjoyment WebSite, specifically within the /Report/Upload/UploadFormImg.ashx file, where an unrestricted file upload is possible. By manipulating the 'File' argument, an attacker could upload potentially harmful files to the server, leading to severe security risks. The exploit can be executed remotely, making it especially dangerous. The vulnerability has been publicly disclosed, heightening the urgency for affected users to implement security measures.

Affected Version(s)

U+Smart Enjoyment WebSite 18.6001.1096.1000

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-86272 - Proof of Concept