CVE-2026-2334

creationtimestamp| type| source ---|---|--- 2026-08-20 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjyrv7zo524 2026-08-20 20:07:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2cw6bnr2t...

CVE-2026-2334

vsDesk v14.0101 is affected by a missing server-side file extension validation in the "Import via CSV" component. An authenticated attacker with administrative privileges can bypass client-side validation to upload an arbitrary file, leading to Remote Code Execution (RCE) within the web applicati...