Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 04 Sep 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unrestricted File Upload in EasyAdmin v2.0.2.2 Leading to Remote Code Execution | |
| Weaknesses | CWE-434 |
Fri, 04 Sep 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authenticated remote attackers to execute arbitrary code and gain server privileges via a crafted file upload. | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-09-04T20:12:15.598Z
Reserved: 2026-06-07T00:00:00.000Z
Link: CVE-2026-50894
No data.
Status : Received
Published: 2026-09-04T21:17:25.177
Modified: 2026-09-04T21:17:25.177
Link: CVE-2026-50894
No data.
OpenCVE Enrichment
Updated: 2026-09-04T22:30:07Z