EUVD-2026-71770

An arbitrary file deletion vulnerability in the /adminapi/file/videodatasave component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request...

CVE-2026-79426

CRMEB v6.0.0 is affected by an arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component. An authenticated attacker can issue a crafted POST request to delete arbitrary files on the server. No CVSS score, specific fix version, or evidence of in-the-wild exploitation is...