CVE-2026-52705

CRITICAL

Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.

StatusDeferred

설명

Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.

Score Summary

CVSS Score: 9.0
Version: 3.1
VPI: 90
Why this VPI (explainable, experimental)
VPI breakdown
Impact 90.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 90.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 21.3%)
Attack Vector: Network
High Complexity
No Privileges
No User Interaction
Scope Changed
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (1)

Impact	90.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	90.00