{"id":"CVE-2026-39770","published":"2026-10-06T09:17:49.427","lastModified":"2026-10-06T15:04:25.990","description":"Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-434"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/theme/doctreat/vulnerability/wordpress-doctreat-theme-1-7-0-arbitrary-file-upload-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated users to upload arbitrary files, leading to potential unauthorized access, data compromise, and system control.","exploitability":"Exploitation is straightforward as no authentication is required, and the flaw is present in all versions up to 1.7.0.","blast_radius":"If exploited, attackers could gain full control over the system, leading to severe data breaches and operational disruptions.","remediation":"Upgrade to Doctreat 1.7.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["file-upload","unauth","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:42:44.229Z"}}