CVE-2026-86272

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 7, 2026

Last Seen

September 7, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Unauthorized File Upload Vulnerability in U+Smart Enjoyment Website57.8

A critical vulnerability, CVE-2026-86272, has been identified in the U+Smart Enjoyment Website developed by Beijing Meite Software Technology. The vulnerability allows for unauthorized file uploads via the /Report/Upload/UploadFormImg.ashx interface, which lacks proper validation and filtering. Atta...