🔐 CVE Alert

CVE-2026-91844

HIGH 7.3

Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamip

CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th

Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6.

CWE CWE-434
Vendor izometri it services domestic and foreign trade co. ltd.
Product eimzamip
Published Oct 8, 2026
Last Updated Oct 8, 2026
Stay Ahead of the Next One

Get instant alerts for izometri it services domestic and foreign trade co. ltd. eimzamip

Be the first to know when new high vulnerabilities affecting izometri it services domestic and foreign trade co. ltd. eimzamip are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Affected Versions

İzometri IT Services Domestic and Foreign Trade Co. Ltd. / eimzamip
v1.6.4 < v1.6.6

References

NVD ↗ CVE.org ↗ EPSS Data ↗
siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1275

Credits

Koray Danışma Tahsin Ünlütürk