[CVE-2026-101155] An authenticated remote attacker with specific permissions can read or write files on the platform f…

Descripción técnica

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository.

Puntuación CVSS

Score: 9.1/10 — Severidad: CRITICAL — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Debilidades (CWE)

CWE-22

Fuente oficial

Publicado en NIST NVD.