CVE-2024-1659: Megabip

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server (including a PHP code file) without an authentication. This issue affects MegaBIP software versions through 5.10.

Affected products

• Megabip Megabip: up to and including 5.10

Published 2024-06-12. Last modified 2026-06-17.