OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-39759

CRITICAL · CVSS 9.9

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

Workreap Core versions up to 3.4.5 are vulnerable to an arbitrary file upload flaw, allowing attackers to upload malicious files that could lead to remote code execution. This critical vulnerability poses significant risks to organizations using affected versions, as it can compromise system integrity and data security. Organizations utilizing Workreap Core should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-39759
Severity
CRITICAL
CVSS
9.9
EPSS
N/A

Original NVD Description

Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.