CVE-2026-75339

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them.

Published 2026-08-28. Last modified 2026-09-09.