CVE-2026-102143

Summary

An unauthenticated attacker can upload files with controlled content to the appliance filesystem through an administrative upload handler that lacks proper authentication. This creates a potential path for privilege escalation and system compromise when combined with a separate code execution vulnerability.

Exploitability

Exploitation is straightforward with no prerequisites, as the vulnerability allows direct file upload without authentication, though it requires a second vulnerability to achieve full code execution.

Blast radius

The impact could be significant across all appliance instances running the vulnerable upload handler, potentially allowing attackers to place malicious files in executable locations and compromise system integrity.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected administrative upload handler endpoint until a patch is available, or restrict access to it via network segmentation and authentication controls.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.