CVE-2026-67243

refirio / freo2 PUBLISHED

Description (CNA)

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.

Affected (CNA)

Vendor / product	Versions
refirio / freo2	affected 0 before Ver 2.0.0-alpha-14

CWE

CWE-434

References

https://github.com/refirio/freo2/commits/main/
https://jvn.jp/en/jp/JVN52865575/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.