CyberRota Analysis
AI-GeneratedUnimall v4 is susceptible to a Directory Traversal vulnerability in the FileUploadController.local() function, enabling attackers to access and execute arbitrary code on the server. Organizations using this version of Unimall should prioritize remediation efforts to mitigate potential exploitation risks, as this could lead to severe security breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2026-88392
Severity
HIGH
CVSS
7.5
EPSS
0.24%
Original NVD Description
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbitrary code.