CVE-2024-26503

CVE-2024-26503 is an Unrestricted File Upload vulnerability affecting Greek Universities Network Open eClass v3.15 and earlier, allowing authenticated attackers to execute arbitrary code by uploading malicious files to the certbadge.php endpoint. This critical vulnerability has a CVSS score of 9.1, indicating a network-based attack with low complexity, high impact on confidentiality, integrity, and availability, and requiring high privileges. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the high privilege requirement suggests a targeted attack vector.