CVE-2026-11839: Başarsoft Information Technologies Inc Rotaban

Critical severity, CVSS 9.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server. This issue affects Rotaban: from V2026.06.002 before V2026.06.003.

Affected products

• Başarsoft Information Technologies Inc Rotaban: from V2026.06.002, before V2026.06.003 (fixed in V2026.06.003)

Published 2026-06-11. Last modified 2026-06-17.