CVE-2026-107356

Vendor

U.S. Geological Survey

Product

Area Species Management Research Program

CVSS v3.1

8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-434

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   CVE NVD 22h ago

   U.S.

   U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under '/uploads/{upload-file}'. A remote, authenticated attacker could upload a crafted PHP file that executes…

   PoC public CVSS 8.8 CVE-2026-107356 U.S. Geological Survey