All vulnerabilities
CVE-2024-26503

Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint.

n/a n/a
Open in ThreatlineRecord JSON
CVSS
9.1Critical
ExploitationPublic exploit codeWebapps exploit, 21 Oct 2026. Not in the KEV catalogExploit-DB
Exploit odds (EPSS)2.96%Chance of exploitation activity in the next 30 days, higher than 87% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
Published14 Mar 2024Updated 28 Aug 2024CVE List

What fixes it

No source in this snapshot names a fixed version.

Timeline

  1. 14 Mar 2024, 00:00 UTCPublishedCVE List
  2. 21 Oct 2026Exploit code publicExploit-DB

Public exploit code and templates 1

  • Webapps exploitOpen eClass 3.15 - RCE 21 Oct 2026Exploit-DB

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Affected versions 1

  • n/aaffected: n/aCVE List

References 1