High severity7.3NVD Advisory· Published Sep 7, 2026

CVE-2026-86272

Description

A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Upload/UploadFormImg.ashx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Beijing Meite Software Technology/U+Smart Enjoyment WebSitellm-create
Range: 18.6001.1096.1000

Patches

Vulnerability mechanics

References

ucn9h68n9289.feishu.cn/wiki/IYaowPR6licbC3kdw3xcJpQ7n6bnvd
vuldb.com/cve/CVE-2026-86272nvd
vuldb.com/submit/904145nvd
vuldb.com/vuln/399431nvd
vuldb.com/vuln/399431/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000