PT-2026-69327 · Saithink/Saigroup · Siadmin

Xiaobu

·

CVE-2026-19383

·

Published

2026-08-10

·

Updated

2026-08-10

CVSS v2.0

5.8

Medium

VectorAV:N/AC:L/Au:M/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions saithink/saigroup SaiAdmin versions prior to 5.0.2
Description A flaw in the Plugin Upload Endpoint allows for unrestricted file upload. This issue occurs within the shell exec() function located in the /app/saipackage/install/upload file, enabling remote exploitation.
Recommendations Update to a version newer than 5.0.1. As a temporary mitigation, restrict access to the /app/saipackage/install/upload file to prevent unauthorized uploads.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284CWE-434

Related Identifiers

CVE-2026-19383

Affected Products

Siadmin