CVE-2026-2701

CVE-2026-2701 is a critical remote code execution (RCE) vulnerability that allows an authenticated user to upload and execute malicious files on the server. With a CVSS score of 9.1 Critical, it features a network attack vector and low attack complexity, requiring high privileges but leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, it is marked as "Active" on the Hot List, indicating its current relevance and potential for exploitation. Despite the absence of public exploit code in common repositories like Metasploit or ExploitDB, it has generated significant community discussion and media coverage, suggesting high awareness and potential for real-world exploitation.