CVE-2026-19383

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-19383", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-09T17:25:22.752Z", "datePublished": "2026-08-10T01:00:10.437Z", "dateUpdated": "2026-08-10T16:16:12.624Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-10T01:00:10.437Z"}, "title": "saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-434", "lang": "en", "description": "Unrestricted Upload"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "Improper Access Controls"}]}], "affected": [{"vendor": "saithink", "product": "SaiAdmin", "versions": [{"version": "5.0.0", "status": "affected"}, {"version": "5.0.1", "status": "affected"}], "cpes": ["cpe:2.3:a:saithink:saiadmin:*:*:*:*:*:*:*:*"], "modules": ["Plugin Upload Endpoint"]}, {"vendor": "saigroup", "product": "SaiAdmin", "versions": [{"version": "5.0.0", "status": "affected"}, {"version": "5.0.1", "status": "affected"}], "cpes": ["cpe:2.3:a:saigroup:saiadmin:*:*:*:*:*:*:*:*"], "modules": ["Plugin Upload Endpoint"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product is published by multiple vendors."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.1, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.7, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.7, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.8, "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-08-09T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-09T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-09T19:30:28.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "xiaobu (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/387276", "name": "VDB-387276 | saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/387276/cti", "name": "VDB-387276 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-19383", "name": "CVE-2026-19383 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/866981", "name": "Submit #866981 | saithink saiadmin 5.0.1 Remote Code Execution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sign9981/CVE/issues/1", "tags": ["exploit", "issue-tracking"]}], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-10T16:15:32.406059Z", "id": "CVE-2026-19383", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-10T16:16:12.624Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-19383", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-10T16:15:32.406059Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-10T16:16:06.440Z"}}], "cna": {"title": "saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload", "credits": [{"lang": "en", "type": "reporter", "value": "xiaobu (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5.8, "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:saithink:saiadmin:*:*:*:*:*:*:*:*"], "vendor": "saithink", "modules": ["Plugin Upload Endpoint"], "product": "SaiAdmin", "versions": [{"status": "affected", "version": "5.0.0"}, {"status": "affected", "version": "5.0.1"}]}, {"cpes": ["cpe:2.3:a:saigroup:saiadmin:*:*:*:*:*:*:*:*"], "vendor": "saigroup", "modules": ["Plugin Upload Endpoint"], "product": "SaiAdmin", "versions": [{"status": "affected", "version": "5.0.0"}, {"status": "affected", "version": "5.0.1"}]}], "timeline": [{"lang": "en", "time": "2026-08-09T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-08-09T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-08-09T19:30:28.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/387276", "name": "VDB-387276 | saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/387276/cti", "name": "VDB-387276 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-19383", "name": "CVE-2026-19383 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/866981", "name": "Submit #866981 | saithink saiadmin 5.0.1 Remote Code Execution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sign9981/CVE/issues/1", "tags": ["exploit", "issue-tracking"]}], "x_generator": ["VulDB PVTS v202608"], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product is published by multiple vendors."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "Unrestricted Upload"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper Access Controls"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-10T01:00:10.437Z"}}}, "cveMetadata": {"cveId": "CVE-2026-19383", "state": "PUBLISHED", "dateUpdated": "2026-08-10T16:16:12.624Z", "dateReserved": "2026-08-09T17:25:22.752Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-08-10T01:00:10.437Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:saithink:saiadmin:*:*:*:*:*:*:*:*"], "modules": ["Plugin Upload Endpoint"], "product": "SaiAdmin", "vendor": "saithink", "versions": [{"status": "affected", "version": "5.0.0"}, {"status": "affected", "version": "5.0.1"}]}, {"cpes": ["cpe:2.3:a:saigroup:saiadmin:*:*:*:*:*:*:*:*"], "modules": ["Plugin Upload Endpoint"], "product": "SaiAdmin", "vendor": "saigroup", "versions": [{"status": "affected", "version": "5.0.0"}, {"status": "affected", "version": "5.0.1"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shell_exec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product is published by multiple vendors."}], "id": "CVE-2026-19383", "lastModified": "2026-08-12T20:59:21.023", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "MULTIPLE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.4, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.0, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19383", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-10T16:15:32.406059Z", "version": "2.0.3"}}]}, "published": "2026-08-10T02:16:43.910", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/sign9981/CVE/issues/1"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-19383"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/866981"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/387276"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/387276/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-434"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "SaiAdmin", "source": "cna", "vendor": "saigroup"}, "product": "saiadmin", "vendor": "saigroup"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.0.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "SaiAdmin", "source": "cna", "vendor": "saithink"}, "product": "saiadmin", "vendor": "saithink"}], "created": "2026-08-10T02:30:04.023170+00:00", "updated": "2026-08-11T14:26:20.073285+00:00", "vendors": ["saigroup", "saigroup$PRODUCT$saiadmin", "saithink", "saithink$PRODUCT$saiadmin"]}