CVE-2026-40552

What it is

Multiple BinSoft products are vulnerable to Remote Command Execution. An authorized user with access to the application and direct access to the backend database can achieve system command execution by uploading an attachment and modifying its storage path in the database to reference an attacker-controlled remote network resource. Alternatively, it is possible to use a previously uploaded file and change its reference. When the application processes the attachment, and a user tries to open it, the referenced resource is executed by the system. Critically, this vulnerability can be exploited by any unauthenticated attacker by chaining it with CVE-2026-40550 and CVE-2026-40551, which allows obtaining database access, and logging onto any account. The described issue affects all published versions. The vendor stated that this issue is a direct result of the architecture model in which the software is distributed, and that it will be mitigated with a corrected installation manual.

At a glance

Exploitability

Can be exploited from the same network segment with an admin-level account, but needs a user to act. Limited direct impact.

Exploit odds

0.3% chance of exploitation in the next 30 days (EPSS).

Fix

No patch or advisory is linked yet. Look at mitigations or restrict exposure.

Timeline

1. 2026-04-28 14:16 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-10-26 21:10 UTC Last updatedMost recent change to the record

Details

Published

2026-04-28 14:16 UTC

Last modified

2026-10-26 21:10 UTC

Exploit probability

0.3% · EPSS, next 30 days

Weakness

CWE-669

Record status

Deferred

Attack profile CVSS 4.0 · 4.7

Attack vector

Adjacent network

Complexity

Low

Attack requirements

None

Privileges needed

High

User interaction

Passive

Confidentiality

Low

Integrity

Low

Availability

Low