CVE-2024-48781: Wanxingtechnology Yitu Project Management Kirin Edition

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue in Wanxing Technology Yitu Project Management Kirin Edition 2.3.6 allows a remote attacker to execute arbitrary code via a specially constructed so file/opt/EdrawProj-2/plugins/imageformat.

Affected products

• Wanxingtechnology Yitu Project Management Kirin Edition: version 2.3.6 only

Published 2024-10-15. Last modified 2026-06-17.