Topic
3 articles
CyberSecureToday covers Arbitrary File Upload across 3 articles published between 23 Sep 2026 and 30 Sep 2026.
The coverage includes 3 vulnerability advisories. 3 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on Arbitrary File Upload most often intersect with CWE-434, Toptech Systems and TMS7, with Industrial, OT & IoT the most affected sector. The most recent story, “Toptech TMS7 Flaws Expose Oil and Gas Terminal Loading Racks to Remote Hijack”, was published 30 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelCISA advisory ICSA-26-272-02 exposes critical flaws in Toptech TMS7 and TopHAT, enabling remote unauthenticated attackers to hijack oil and gas loading racks.
Check PointCheck Point and CISA confirm active in-the-wild exploitation of CVSS 9.8 flaw CVE-2026-93616 allowing unauthenticated attackers to write arbitrary files as root.
OT / SCADASiemens patches critical CVSS 9.0 flaw CVE-2026-50093 in Siveillance Control OIS web service, enabling unauthenticated remote attackers to obtain root privileges.