PT-2026-65786

CVE-2026-65885

Published

2026-07-29

Updated

2026-07-29

Description by

CVSS 4.0

9.4

Critical

MetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red

Name of the Vulnerable Software and Affected Versions Gridbox versions prior to 2.20.2

Description File upload methods allow authenticated attackers to upload arbitrary files. This issue can lead to authenticated Remote Code Execution (RCE), which is the ability to execute arbitrary commands on a remote machine, if combined with another flaw that allows the attacker to create the required account.

Recommendations Update Gridbox to version 2.20.2 or later.

Exploitability

Fix

Impacts

Researchers

Pascal Lohmann

Phil Taylor

Vendors

Affected products

Weakness enumeration

CWE-434: Unrestricted Upload of File with Dangerous Type

Related identifiers