CVE-2026-11839Disclosure

LOWCVSS 9.9 · CRITICAL

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server. This issue affects Rotaban: from V2026.06.002 before V2026.06.003.

2.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-434

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-11: 3PoC Mentioned / Linked · 2026-06-11: 1Patch / Workaround · 2026-06-11: 1Technical Details · 2026-06-11: 306-11
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-11839 — CVSS 9.9/10 ██████████ Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/j6GPYUZeGZ

    Post summary

    The tweet highlights a critical CVE‑2026‑11839 that allows unrestricted dangerous file uploads in Rotaban, notes a high CVSS score, and urges users to apply the available patch.

    10000110
    59 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-11839 Unrestricted File Upload Vulnerability in Başarsoft Rotab... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11839 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    CVE-2026-11839 is reported as an unrestricted file upload flaw in Başarsoft Rotab, with scanning alert links provided, but no PoC, exploit, patch, or evidence of active exploitation is disclosed.

    0000057
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-11839 Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Technologies Inc. Rotaban allows Upload a Web Shell to a Web Server. This issu… https://www.cve.org/CVERecord?id=CVE-2026-11839

    Post summary

    The post announces CVE‑2026‑11839, noting an unrestricted file upload that allows a web shell, but provides no exploitation code, active usage evidence, or patch information.

    00000107
    57.6K followersView on X

Explore more