CVE-2026-1791 — Arbitrary File Upload Vulnerability in Operation and Maintenance Security Gateway

CVE-2026-1791

Arbitrary File Upload Vulnerability in Operation and Maintenance Security Gateway PUBLISHED

Description (CNA)

Unrestricted Upload of File with Dangerous Type vulnerability in Hillstone Networks Operation and Maintenance Security Gateway on Linux allows Upload a Web Shell to a Web Server.This issue affects Operation and Maintenance Security Gateway: V5.5ST00001B113.

Affected (CNA)

Vendor / product	Versions
Hillstone Networks / Operation and Maintenance Security Gateway	affected V5.5ST00001B113

CWE

CWE-434

References

https://www.hillstonenet.com.cn/security-notification/2025/12/08/wgscld/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.