CVE-2026-82524— UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
Quick assessment
Affected
unopim unopim
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
UnoPim 2.1.5 之前版本存在一个经过身份验证的文件上传漏洞。由于 TinyMCE 图片上传端点缺少对文件扩展名和 MIME 类型的验证，经过身份验证的管理员可以上传任意 PHP 文件。攻击者可以通过访问服务器响应中返回的 URL 来访问上传至公共存储目录的 PHP web shell，从而在服务器上执行任意操作系统命令。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82524
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
Source: CVE Program / CVE List V5
Vulnerability Description
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public storage disk and execute arbitrary operating system commands on the server by accessing the uploaded file at the URL returned in the server response.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
危险类型文件的不加限制上传
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-82524
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82524
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-82524 (1)
Vendor Advisories for CVE-2026-82524 (1)
-
🔗 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint | Advisories | VulnCheck third-party-advisory
Security Blog Posts for CVE-2026-82524 (1)
-
🔗 Remote Code Execution (RCE) via Unrestricted File Upload in UnoPim v2.1.4 · Ashutosh Jena Read full article technical-description exploit
Vendor Pages for CVE-2026-82524 (1)
-
🔗 Release v2.1.5 · unopim/unopim · GitHub release-notes
IV. Related Vulnerabilities
Same product: unopim
-
CVE-2025-55745
UnoPim Quick Export feature is vulnerable to CSV injection -
CVE-2025-55741
unopim/unopim allows unauthorized product deletion via mass- -
CVE-2025-55744
UnoPim vulnerable to CSRF on Product edit feature and creati -
CVE-2025-55743
UnoPim vulnerable to remote code execution through Arbitrary -
CVE-2025-55742
UnoPim Stored XSS via SVG MIME/Sanitizer Bypass
Same vendor: unopim
-
CVE-2025-55745
UnoPim Quick Export feature is vulnerable to CSV injection -
CVE-2025-55741
unopim/unopim allows unauthorized product deletion via mass- -
CVE-2025-55744
UnoPim vulnerable to CSRF on Product edit feature and creati -
CVE-2025-55743
UnoPim vulnerable to remote code execution through Arbitrary -
CVE-2025-55742
UnoPim Stored XSS via SVG MIME/Sanitizer Bypass
Same weakness: CWE-434
-
CVE-2026-19513
Gravity Forms <= 3.0.2 - Unauthenticated Arbitrary File Uplo -
CVE-2026-84147
Remote Code Execution Vulnerability in Manacle Technologies -
CVE-2026-75865
WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary Fil -
CVE-2026-82921
ShopEx ECShop pack.php check_img_type unrestricted upload -
CVE-2026-81891
elFinder: ZIP extraction bypasses uploadDeny MIME filter all
V. Comments for CVE-2026-82524
No comments yet