CVE-2022-26605: Dascomsoft Eziosuite

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality.

Affected products

• Dascomsoft Eziosuite: version 2.0.7 only

Published 2022-04-06. Last modified 2026-06-17.