CVE-2020-26806

CVE-2020-26806 is a critical unrestricted file upload vulnerability affecting ObjectPlanet Opinio versions prior to 7.15. An authenticated attacker can exploit this flaw by uploading malicious JSP files, leveraging directory traversal to achieve remote code execution. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high FAUCET Risk Score of 76/100 indicates its potential for future exploitation.