CVE-2026-102140

4.9 MEDIUMpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-345

Public exploit & PoC references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-wfxj-p5jc-jqjw

All references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-wfxj-p5jc-jqjw
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2025-12999PoC
HIGHCVE-2026-100872PoC
MEDIUMCVE-2026-101278
UNSCOREDCVE-2026-102250
HIGHCVE-2026-102267PoC
MEDIUMCVE-2026-102275PoC
HIGHCVE-2026-102677PoC
MEDIUMCVE-2026-102682PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.