All vulnerabilities
CVE-2026-85134

Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management System
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 17% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in10.0.11Fixed versionCVE List
Published28 Sep 2026Updated 28 Sep 2026CVE List

What fixes it

  • 10.0.11eBA Plus Document and Workflow Management SystemCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server.

This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Text from CVE List

Affected versions 1

  • eBA Plus Document and Workflow Management Systemaffected: 6.7.141 before 10.0.11CVE List

References 1