PT-2026-69327
CVE-2026-19383
·
Published
2026-08-10
·
Updated
2026-08-10
Description by
CVSS 2.0
5.8
MediumMetricsAV:N/AC:L/Au:M/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
saithink/saigroup SaiAdmin versions prior to 5.0.2
Description
A flaw in the Plugin Upload Endpoint allows for unrestricted file upload. This issue occurs within the
shell exec() function located in the /app/saipackage/install/upload file, enabling remote exploitation.Recommendations
Update to a version newer than 5.0.1.
As a temporary mitigation, restrict access to the
/app/saipackage/install/upload file to prevent unauthorized uploads.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾