Critical severity9.8NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026

CVE-2024-1659

Description

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server (including a PHP code file) without an authentication. This issue affects MegaBIP software versions through 5.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Megabip/Megabipllm-fuzzy2 versions
<=5.10+ 1 more
- (no CPE)range: <=5.10
- cpe:2.3:a:megabip:megabip:*:*:*:*:*:*:*:*range: <=5.10
Jan Syski/MegaBIPv5
Range: 0

Patches

Vulnerability mechanics

References

cert.pl/en/posts/2024/06/CVE-2024-1576/nvdThird Party Advisory
cert.pl/posts/2024/06/CVE-2024-1576/nvdThird Party Advisory
megabip.plnvdProduct
www.gov.pl/web/cyfryzacja/rekomendacja-pelnomocnika-rzadu-ds-cyberbezpieczenstwa-dotyczaca-biuletynow-informacji-publicznejnvdPress/Media Coverage

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000