Filtered by vendor U.s. Geological Survey
Subscriptions
Filtered by product Area Species Management Research Program
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-107356 | 1 U.s. Geological Survey | 1 Area Species Management Research Program | 2026-11-12 | 8.8 High |
| U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under '/uploads/{upload-file}'. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when accessed. Fixed on 2026-07-20. | ||||
Page 1 of 1.