VYPR

Area Species Management Research Program

by U.S. Geological Survey

CVEs (1)

  • CVE-2026-107356HigNov 10, 2026
    risk 0.57cvss 8.8epss —

    U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under '/uploads/{upload-file}'. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from the server when…