{"id":"CVE-2026-102143","published":"2026-09-30T21:17:03.143","lastModified":"2026-10-01T16:17:33.493","description":"An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate vulnerability to place the file in an executable location.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-306","CWE-434"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-3p9g-jh62-8f89","tags":[]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":[]}],"exploitRefs":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-3p9g-jh62-8f89","tags":[]}],"hasPoc":true,"ai":{"summary":"An unauthenticated attacker can upload files with controlled content to the appliance filesystem through an administrative upload handler that lacks proper authentication. This creates a potential path for privilege escalation and system compromise when combined with a separate code execution vulnerability.","exploitability":"Exploitation is straightforward with no prerequisites, as the vulnerability allows direct file upload without authentication, though it requires a second vulnerability to achieve full code execution.","blast_radius":"The impact could be significant across all appliance instances running the vulnerable upload handler, potentially allowing attackers to place malicious files in executable locations and compromise system integrity.","remediation":"Disable the affected administrative upload handler endpoint until a patch is available, or restrict access to it via network segmentation and authentication controls.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["file-upload","auth-bypass","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:07:46.440Z"}}