{"id":"CVE-2026-91844","revision":"d79152fa387d4d4e89da822595abebf4","records":[{"revision":"d79152fa387d4d4e89da822595abebf4","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-91844","aliases":[],"title":"Remote Code Execution via Unrestricted File Upload in İzometri Informatics' eimzamip","description":"Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files.\n\nThis issue affects eimzamip: from v1.6.4 before v1.6.6.","state":0,"publishedAt":"2026-10-08T13:42:27.448+00:00","modifiedAt":"2026-10-08T13:57:24.257+00:00","affected":[{"ecosystem":"Vendor product","name":"eimzamip","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"İzometri IT Services Domestic and Foreign Trade Co. Ltd.\",\n                    \"product\": \"eimzamip\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"v1.6.4\",\n                            \"lessThan\": \"v1.6.6\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","score":7.3,"severity":"HIGH"}],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1275"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-91844","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-91844","identifiers":["CVE-2026-91844"]},"retained":false,"historicalAffected":[]}],"coverage":[]}