Arbitrary file upload in Refirio Freo2
CVE-2026-67243
freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.
Vulnerability class: Unrestricted File Upload
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Refirio Freo2 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-67243?
- CVE-2026-67243 is a high-severity vulnerability in Refirio Freo2, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2026-08-04.
- How severe is CVE-2026-67243?
- High severity. CVSS v3 base score is 7.2 out of 10.