CVE-2021-35261: Bearadmin Project Bearadmin

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitrary remote code via the Upfile function of the extend/tools/Ueditor endpoint.

Affected products

• Bearadmin Project Bearadmin: affected versions not specified

Published 2023-02-17. Last modified 2026-06-17.