CVE-2026-39759: Amentotech Workreap Core

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions.

Affected products

• Amentotech Workreap Core: up to and including 3.4.5

Published 2026-10-06. Last modified 2026-10-06.