MajorCritical vulnerability

CVE-2026-102454 (CVSS 8.6)

NVD · officialPublished Sep 30, 2026Risk 37/100

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Technical details

CVSS

8.6

AV:NetworkAC:LowPR:HighUI:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source