PT-2026-78991 · Unknown · Warehouse Cargo

CVE-2026-74018

Published

2026-08-20

Updated

2026-08-27

CVSS v3.1

9.9

Critical

Vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Warehouse Cargo versions prior to 2.7.0

Description An issue allows subscribers to perform arbitrary file uploads, which could lead to the upload of unauthorized files to the server.

Recommendations Update to a version newer than 2.6.9.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-74018

Warehouse Cargo