SEPTEMBER 11, 2026
Live Feed
Back to database
Case File

CVE-2026-38450

CRITICAL · CVSS 9.8 EPSS 0.78%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

Aetopia Digital Asset Management (DAM) version 1.0.0 is vulnerable to remote code execution due to improper handling of the name and description parameters in the Add/Update Project function. This critical vulnerability, rated 9.8 on the CVSS scale, allows attackers to execute arbitrary code on the server, potentially leading to full system compromise. Organizations using this version of Aetopia DAM should prioritize immediate patching or mitigation efforts to safeguard their systems against potential exploitation.

CVE
CVE-2026-38450
Severity
CRITICAL
CVSS
9.8
EPSS
0.78%

Original NVD Description

An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function