01 Record

CVE-2026-2334

) Missing Server-Side File Extension Validation in vsDesk

CriticalPUBLISHEDCNA: Kaspersky

Base score9.4 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

02 Description

) Missing Server-Side File Extension Validation in vsDesk

Published

2026-08-20 18:03Z1 DAY AGO

Last updated

2026-08-20 18:03Z1 DAY AGO

Reserved

2026-02-11

Assigning CNA

Kaspersky

Record state

PUBLISHED

Severity

Critical (CVSS 9.4)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

dc2a0a62a8d7eaf1de3a0a30f626a3c7498698207defe758a6429263a707c7a6

VendorProductVersionsPlatforms

vsDeskvsDesk14.0101—