HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-44097 — A low-privileged remote attacker with "operator" access can upload arbitrary fil...

·Source: NIST NVD

Updated:

Executive Summary

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service.

Analysis

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service. CVSS Score: 7.1. Published: 2026-07-30T07:16:57.813.

Indicators of Compromise (1)

CVE (1)
CVE-2026-44097
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 30, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Mastercard strengthens Asia Pacific leadership team

Mastercard today announced that Joyce Bo has joined the company as Executive Vice President, Core Payments, Asia Pacific.

Finextra
MEDIUMVulnerabilityNEW

AutoRek acquires Grath

AutoRek, the leader in enterprise financial controls and reconciliation automation, today announced the acquisition of Grath, an innovative fintech recognised for its AI-driven approach to reconciliation and compliance challenges in financial services.

Finextra
MEDIUMVulnerabilityNEW

Ripple invests in UK digital assets platform Licuido

Capital markets tokenization platform Licuido has secured a strategic investment from Ripple to scale its operations and support the development of digital capital markets infrastructure on the XRP Ledger (XRPL).

Finextra