CVE-2026-88738 | BDVDB-2026-377457 Detail

Description#

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An attacker with administrative privileges can upload a server-side executable file. The uploaded file is stored in a web-accessible executable location and can be accessed directly over HTTP without authentication, resulting in remote code execution.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-21Record published in the CVE List.
2. Version 22026-09-22Most recent update recorded in the CVE List.