CVE-2024-26503 EXPLOIT
9.1
CRITICAL · CVSS 3.1 · EPSS 3% (pctl 87)
Patch early
A public exploit exists.
Description
Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.
Scoring
| CVSS | 9.1 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 2.96% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-434 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2024-03-14 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| openeclass | openeclass |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Open eClass 3.15 - RCE | 2026-10-21 |
References
→ the Explorer · watch your stack · NVD