High severity7.3NVD Advisory· Published May 28, 2026· Updated May 29, 2026

CVE-2026-30761

Description

An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6 allows attackers to execute arbitrary code via uploading a crafted image file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sb Materialadmin/Webreferences
Drupal/Material Adminllm-fuzzy
Range: =1.1.6

Patches

Vulnerability mechanics

References

gist.github.com/ng-dst/254163056c2d8a2f55259dcb79531b31nvd
gist.github.com/ng-dst/ca6663a4107fd39eaba1be2cb1d52b51nvd
github.com/SB-MaterialAdmin/Web/issues/374nvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000