What is CVE-2026-7673?

CVE-2026-7673 is a medium-severity vulnerability in Crmeb_java, classified under Improper Access Control. CVSS score: 4.7/10. Published 2026-05-03.

How severe is CVE-2026-7673?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Arbitrary file upload in Crmeb_java

CVE-2026-7673

A vulnerability was detected in crmeb_java up to 1.3.4. This vulnerability affects unknown code of the file crmeb/crmeb-service/src/main/java/com/zbkj/service/service/impl/UploadServiceImpl.java of the component Admin Upload. Performing a…

EPSS: 0.000 (15.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L.

Affected products

N/a Crmeb_java — versions 1.3.0, 1.3.1, 1.3.2

Weakness classification (CWE)

References

VDB-360826 | crmeb_java Admin Upload UploadServiceImpl.java unrestricted upload (technical-description, vdb-entry)
VDB-360826 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
Submit #800684 | crmeb crmeb_java 1.3.4 Unrestricted Upload (third-party-advisory)
cna@vuldb.com (exploit)

Frequently asked questions

What is CVE-2026-7673?: CVE-2026-7673 is a medium-severity vulnerability in Crmeb_java, classified under Improper Access Control. CVSS score: 4.7/10. Published 2026-05-03.
How severe is CVE-2026-7673?: Medium severity. CVSS v3 base score is 4.7 out of 10.