CVE-2026-5261

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5261", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-31T16:25:46.805Z", "datePublished": "2026-04-01T08:15:55.111Z", "dateUpdated": "2026-04-03T19:45:57.078Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-01T08:15:55.111Z"}, "title": "Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-434", "lang": "en", "description": "Unrestricted Upload"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "Improper Access Controls"}]}], "affected": [{"vendor": "Shandong Hoteam", "product": "InforCenter PLM", "versions": [{"version": "8.3.0", "status": "affected"}, {"version": "8.3.1", "status": "affected"}, {"version": "8.3.2", "status": "affected"}, {"version": "8.3.3", "status": "affected"}, {"version": "8.3.4", "status": "affected"}, {"version": "8.3.5", "status": "affected"}, {"version": "8.3.6", "status": "affected"}, {"version": "8.3.7", "status": "affected"}, {"version": "8.3.8", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacted element is the function uploadFileToIIS of the file /Base/BaseHandler.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-03-31T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-31T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-31T18:30:52.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "0menc (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/354450", "name": "VDB-354450 | Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/354450/cti", "name": "VDB-354450 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/780725", "name": "Submit #780725 | Shandong Hoteam Software Co., Ltd. Huatian Software InforCenter PLM <8.3.8 Remote Code Execution", "tags": ["third-party-advisory"]}, {"url": "https://my.feishu.cn/docx/ToGkdd5jwokb4PxEMkHcKrfXn3b?from=from_copylink", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-03T19:45:43.894015Z", "id": "CVE-2026-5261", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-03T19:45:57.078Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5261", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-03T19:45:43.894015Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-03T19:45:52.462Z"}}], "cna": {"title": "Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload", "credits": [{"lang": "en", "type": "reporter", "value": "0menc (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "Shandong Hoteam", "product": "InforCenter PLM", "versions": [{"status": "affected", "version": "8.3.0"}, {"status": "affected", "version": "8.3.1"}, {"status": "affected", "version": "8.3.2"}, {"status": "affected", "version": "8.3.3"}, {"status": "affected", "version": "8.3.4"}, {"status": "affected", "version": "8.3.5"}, {"status": "affected", "version": "8.3.6"}, {"status": "affected", "version": "8.3.7"}, {"status": "affected", "version": "8.3.8"}]}], "timeline": [{"lang": "en", "time": "2026-03-31T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-31T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-31T18:30:52.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/354450", "name": "VDB-354450 | Shandong Hoteam InforCenter PLM BaseHandler.ashx uploadFileToIIS unrestricted upload", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/354450/cti", "name": "VDB-354450 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/submit/780725", "name": "Submit #780725 | Shandong Hoteam Software Co., Ltd. Huatian Software InforCenter PLM <8.3.8 Remote Code Execution", "tags": ["third-party-advisory"]}, {"url": "https://my.feishu.cn/docx/ToGkdd5jwokb4PxEMkHcKrfXn3b?from=from_copylink", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacted element is the function uploadFileToIIS of the file /Base/BaseHandler.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "Unrestricted Upload"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper Access Controls"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-04-01T08:15:55.111Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5261", "state": "PUBLISHED", "dateUpdated": "2026-04-03T19:45:57.078Z", "dateReserved": "2026-03-31T16:25:46.805Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-04-01T08:15:55.111Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "InforCenter PLM", "vendor": "Shandong Hoteam", "versions": [{"status": "affected", "version": "8.3.0"}, {"status": "affected", "version": "8.3.1"}, {"status": "affected", "version": "8.3.2"}, {"status": "affected", "version": "8.3.3"}, {"status": "affected", "version": "8.3.4"}, {"status": "affected", "version": "8.3.5"}, {"status": "affected", "version": "8.3.6"}, {"status": "affected", "version": "8.3.7"}, {"status": "affected", "version": "8.3.8"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8. The impacted element is the function uploadFileToIIS of the file /Base/BaseHandler.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."}, {"lang": "es", "value": "Una vulnerabilidad fue identificada en Shandong Hoteam InforCenter PLM hasta la versi\u00f3n 8.3.8. El elemento afectado es la funci\u00f3n uploadFileToIIS del archivo /Base/BaseHandler.ashx. La manipulaci\u00f3n del argumento File conduce a una carga sin restricciones. Es posible iniciar el ataque de forma remota. El exploit est\u00e1 disponible p\u00fablicamente y podr\u00eda ser utilizado. El proveedor fue contactado con antelaci\u00f3n sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-5261", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5261", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-03T19:45:43.894015Z", "version": "2.0.3"}}]}, "published": "2026-04-01T09:16:17.920", "references": [{"source": "cna@vuldb.com", "url": "https://my.feishu.cn/docx/ToGkdd5jwokb4PxEMkHcKrfXn3b?from=from_copylink"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/780725"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/354450"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/354450/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-434"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.3.8"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "InforCenter PLM", "source": "cna", "vendor": "Shandong Hoteam"}, "product": "inforcenter_plm", "vendor": "shandong_hoteam"}], "analysis": {"en": {"generated_at": "2026-04-01T10:25:55.049094+00:00", "value": {"mitigation_remediation": ["Update or upgrade to a version newer than 8.3.8 provided by the vendor.", "If no patch is available, restrict the uploadFileToIIS endpoint to accept only whitelisted file types or disable the upload functionality entirely.", "Configure the IIS installation to place uploaded files in a non-executable directory and deny script execution there.", "Monitor upload logs for suspicious activity and enforce strict access controls to the upload directory."], "summary": {"action": "Apply Patch", "impact": "Unrestricted File Upload"}, "threat_synthesis": {"affected_systems": "All installations of Shandong Hoteam InforCenter PLM with versions up to and including 8.3.8 are affected. The BaseHandler.ashx upload endpoint is the entry point for the problem.", "description_and_impact": "The vulnerability is located in the uploadFileToIIS routine of the BaseHandler.ashx endpoint used by Shandong Hoteam InforCenter PLM. Manipulating the File parameter allows an attacker to upload any file, regardless of type, to the web server. This can expose sensitive data or place malicious payloads in a location accessible to web clients, creating a potential vector for further compromise. The flaw permits remote attackers to initiate the upload through standard HTTP requests, and public exploit code is available.", "risk_and_exploitability": "The reported severity rating is moderate to high. A publicly available exploit indicates that the attack can be performed remotely by sending a crafted request. Although no detailed exploit probability score is published, the combination of a moderate severity score and an available exploit suggests a realistic threat. The vulnerability is not listed in any known exploited catalog, but the ability to upload arbitrary files remains a serious risk to confidentiality, integrity, and availability of the affected systems."}}}}, "created": "2026-04-02T07:49:44.074318+00:00", "updated": "2026-04-02T20:17:59.151209+00:00", "vendors": ["shandong_hoteam", "shandong_hoteam$PRODUCT$inforcenter_plm"]}