CVE-2026-7411 – Eclipse BaSyx
CVSS 10
CRITICAL
“A simple file upload can turn into full system control.”
This patch addresses a critical path traversal vulnerability in Eclipse BaSyx Java Server SDK affecting versions prior to 2.0.0-milestone-10. The flaw allows an unauthenticated remote attacker to manipulate file upload parameters to write arbitrary files anywhere on the host system. This directly enables remote code execution and full system compromise.
CVE-2026-7411 has a CVSS score of 10.0, which is Critical severity. Proof-of-concept exploitation has been confirmed, significantly increasing the risk of active abuse. The vulnerability requires no authentication and can be executed over the network with minimal effort, making exposed systems highly vulnerable.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-22
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.