CVE-2026-85134 — Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

CVE-2026-85134

Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus PUBLISHED

Description (CNA)

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Affected (CNA)

Vendor / product	Versions
Bimser Solution Software Trade Inc. / eBA Plus Document and Workflow Management System	affected 6.7.141 before 10.0.11

CWE

CWE-434

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1197

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.