一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月22日

CVE-2026-88738 – Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in

未分类
📑 文章目录

Jazzware RT1000 Edge webUI v. 20.0.1 contains an unrestricted file upload vulnerability in the upgrade package upload functionality. An authenticated attacker can upload a server-side executable file. The uploaded file is stored in a web-accessible executable location and can be accessed directly over HTTP without authentication, resulting in remote code execution.