CVE-2024-9985: Ragic Enterprise Cloud Database

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.

Affected products

• Ragic Enterprise Cloud Database: before 2024-08-08 (fixed in 2024-08-08)

Published 2024-10-15. Last modified 2026-06-17.