CVE-2026-1021

Source
https://cve.org/CVERecord?id=CVE-2026-1021
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-1021.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-1021
Published
2026-01-16T03:16:18.817Z
Modified
2026-03-13T11:36:28.642380Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Police Statistics Database System developed by Gotac has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attacker to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.0.2"
            }
        ]
    }
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-1021.json"