CVE-2019-3495

creationtimestamp| type| source ---|---|--- 2025-07-23 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw54sfl52z 2026-06-23 14:06:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4280e75b-ece2-4280-a04c-7eed3230b682...

CVE-2019-3495

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this component can be...

CVE-2019-3495

The CVE-2019-3495 entry describes a vulnerability in Wifi-soft UniBox controller (0.x–2.x) where the component network/mesh/edit-nds.php allows arbitrary file upload, enabling an attacker to upload .php files and execute code on the server with root privileges. Authentication to access this compo...