CVE-2026-96431
— UNSCOREDPublished 2026-09-29 · Updated 2026-09-29
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system commands via a malicious file.
Weaknesses
CWE-434
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100389
- MEDIUMCVE-2026-101071PoC
- MEDIUMCVE-2026-102263
- MEDIUMCVE-2026-102366PoC
- MEDIUMCVE-2026-102842PoC
- HIGHCVE-2026-12264
- HIGHCVE-2026-12269
- HIGHCVE-2026-13248
Related by shared AI tags and CWE weakness class. Browse the full archive.