CVE-2026-80235

CVSS 9.8 (critical) · published 2026-08-26

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Weakness: CWE-434

Source: NVD CVE-2026-80235

References

• https://www.twcert.org.tw/en/cp-139-11137-c6e5f-2.html
• https://www.twcert.org.tw/tw/cp-132-11133-e0167-1.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.