CVE-2026-40548 Unrestricted Upload of File with Dangerous Type in SOPlanning
Authenticated attackers can upload malicious files via backup functionality, potentially leading to remote code execution when combined with path traversal.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-40548?
CVE-2026-40548 is a medium-severity vulnerability in SOPlanning, published on 1 Jun 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
SOPlanning does not verify uploaded file extension. An authenticated attacker with access to the backup functionality can upload a crafted ZIP archive containing a legitimate user.csv file alongside a malicious file, which is extracted on the server. When combined with CVE-2026-40547 (Path Traversal), the malicious file (e.g., a PHP script) can be placed in a web-accessible location and executed via the browser.
This issue affects SOPlanning version 1.55 and below.
Weakness: CWE-434
Which versions are affected by CVE-2026-40548?
How do I fix CVE-2026-40548?
No fix has been published for CVE-2026-40548 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-40548 being exploited?
There is no known exploitation of CVE-2026-40548 in the wild and no public exploit code.
Sources
Also known as GHSA-r6jh-29f2-qhv2.