CVE-2026-9053

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9053", "assignerOrgId": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9", "state": "PUBLISHED", "assignerShortName": "9front", "dateReserved": "2026-05-19T21:39:13.119Z", "datePublished": "2026-05-22T02:57:35.162Z", "dateUpdated": "2026-05-22T12:36:11.446Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9", "shortName": "9front", "dateUpdated": "2026-05-22T02:57:35.162Z"}, "affected": [{"vendor": "9front", "product": "9front", "platforms": ["x86", "32 bit", "64 bit"], "packageName": "mothra", "repo": "https://git.9front.org/plan9front/9front/HEAD/info.html", "modules": ["mothra"], "programFiles": ["/sys/src/cmd/mothra/forms.c"], "programRoutines": [{"name": "rdform()"}], "versions": [{"status": "affected", "version": "f04e113279274526a8dae34de373027b68921fbf", "lessThan": "d145acc9ef0da47131af6ad94e87264e04870d47", "versionType": "git"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element."}]}], "references": [{"url": "https://git.9front.org/plan9front/9front/d145acc9ef0da47131af6ad94e87264e04870d47/commit.html", "tags": ["mitigation"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "PROOF_OF_CONCEPT", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "AUTOMATIC", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P/AU:N/R:A/RE:L/U:Amber"}}], "timeline": [{"time": "2026-05-10T18:00:00.000Z", "lang": "en", "value": "Initial private disclosure"}, {"time": "2026-05-11T18:18:00.000Z", "lang": "en", "value": "Fix committed"}], "credits": [{"lang": "en", "value": "Kristo", "type": "finder"}, {"lang": "en", "value": "Kristo", "type": "reporter"}, {"lang": "en", "value": "Jacob Moody", "type": "coordinator"}, {"lang": "en", "value": "Kristo", "type": "remediation developer"}, {"lang": "en", "value": "cinap_lenrek", "type": "remediation developer"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-434", "lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-22T12:35:42.430223Z", "id": "CVE-2026-9053", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-22T12:36:11.446Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9053", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-22T12:35:42.430223Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-22T12:25:29.106Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Kristo"}, {"lang": "en", "type": "reporter", "value": "Kristo"}, {"lang": "en", "type": "coordinator", "value": "Jacob Moody"}, {"lang": "en", "type": "remediation developer", "value": "Kristo"}, {"lang": "en", "type": "remediation developer", "value": "cinap_lenrek"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "AUTOMATIC", "baseScore": 6.9, "Automatable": "NO", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P/AU:N/R:A/RE:L/U:Amber", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "AMBER", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://git.9front.org/plan9front/9front/HEAD/info.html", "vendor": "9front", "modules": ["mothra"], "product": "9front", "versions": [{"status": "affected", "version": "f04e113279274526a8dae34de373027b68921fbf", "lessThan": "d145acc9ef0da47131af6ad94e87264e04870d47", "versionType": "git"}], "platforms": ["x86", "32 bit", "64 bit"], "packageName": "mothra", "programFiles": ["/sys/src/cmd/mothra/forms.c"], "defaultStatus": "unaffected", "programRoutines": [{"name": "rdform()"}]}], "timeline": [{"lang": "en", "time": "2026-05-10T18:00:00.000Z", "value": "Initial private disclosure"}, {"lang": "en", "time": "2026-05-11T18:18:00.000Z", "value": "Fix committed"}], "references": [{"url": "https://git.9front.org/plan9front/9front/d145acc9ef0da47131af6ad94e87264e04870d47/commit.html", "tags": ["mitigation"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element.", "supportingMedia": [{"type": "text/html", "value": "Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element.", "base64": false}]}], "providerMetadata": {"orgId": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9", "shortName": "9front", "dateUpdated": "2026-05-22T02:57:35.162Z"}}}, "cveMetadata": {"cveId": "CVE-2026-9053", "state": "PUBLISHED", "dateUpdated": "2026-05-22T12:36:11.446Z", "dateReserved": "2026-05-19T21:39:13.119Z", "assignerOrgId": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9", "datePublished": "2026-05-22T02:57:35.162Z", "assignerShortName": "9front"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["mothra"], "packageName": "mothra", "platforms": ["x86", "32 bit", "64 bit"], "product": "9front", "programFiles": ["/sys/src/cmd/mothra/forms.c"], "programRoutines": [{"name": "rdform()"}], "repo": "https://git.9front.org/plan9front/9front/HEAD/info.html", "vendor": "9front", "versions": [{"lessThan": "d145acc9ef0da47131af6ad94e87264e04870d47", "status": "affected", "version": "f04e113279274526a8dae34de373027b68921fbf", "versionType": "git"}]}], "source": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element."}, {"lang": "es", "value": "Mothra respetar\u00eda un valor predeterminado proporcionado por un sitio web para formularios de carga de archivos HTML. Un atacante podr\u00eda dise\u00f1ar un sitio web con una ruta de archivo predeterminada maliciosa y luego ocultar este elemento del formulario."}], "id": "CVE-2026-9053", "lastModified": "2026-07-23T16:10:00.137", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "AUTOMATIC", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:X/RE:L/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "source": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9053", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-22T12:35:42.430223Z", "version": "2.0.3"}}]}, "published": "2026-05-22T04:16:28.430", "references": [{"source": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9", "url": "https://git.9front.org/plan9front/9front/d145acc9ef0da47131af6ad94e87264e04870d47/commit.html"}], "sourceIdentifier": "1d66c9f9-fff2-411a-aa19-ca6312fa25e9", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["x86", "32_bit", "64_bit"], "status": "affected", "versions": {"scheme": "code_commit", "value": "[f04e113279274526a8dae34de373027b68921fbf,d145acc9ef0da47131af6ad94e87264e04870d47)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "9front", "source": "cna", "vendor": "9front"}, "product": "9front", "vendor": "9front"}], "created": "2026-05-22T04:30:25.661654+00:00", "title": "Mothra Default Path Upload Exploit", "updated": "2026-05-22T17:30:06.237285+00:00", "vendors": ["9front", "9front$PRODUCT$9front"]}