CVE-2025-26927

Name of the Vulnerable Software and Affected Versions EPC AI Hub versions 1.3.3 and earlier

Description The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can be exploited to gain unauthorized access or control over the server.

Recommendations For EPC AI Hub versions 1.3.3 and earlier, consider restricting or disabling file upload functionality until a patch is available. As a temporary workaround, implement strict validation and sanitization of uploaded files to prevent the upload of malicious content.