{"uuid": "a68da036-2bad-4c57-9d42-82c0f4bf0ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80237", "type": "seen", "source": "https://t.me/DBXTERSLEARNING/1232", "content": "\ud83d\udfe0 HIGH \u2014 CVE-2026-80237\n\nThinking Software Technology\uff5cEfence - Arbitrary File Upload\n\n\ud83d\udcca CVSS: 8.7 (v4.0)\n\ud83d\udc1b CWE: CWE-434\n\ud83c\udfaf Target: Thinking Software Technology Efence\n\n\ud83d\udcdd EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.\n\n\ud83d\udd17 References:\n  1. www.twcert.org.tw\n  2. www.twcert.org.tw\n\n\ud83d\udcc5 CVE Published: 26 Aug 2026, 08:28 UTC\n\n\ud83d\udd17 NVD Detail\n\ud83d\udd17 CVE.org\n\n\ud83d\udfe1 P3 \u2014 HIGH", "creation_timestamp": "2026-08-31T14:00:05.548590Z"}