Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote attackers to execute arbitrary code by uploading a crafted ZIP archive containing malicious PHP payloads. Attackers can bypass authentication checks in the import.php file to upload a template archive with PHP code in the media directory, which gets extracted to a web-accessible path where the malicious PHP can be directly accessed and executed under the web server context.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32985 Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality. The issue exists … https://www.cve.org/CVERecord?id=CVE-2026-32985
Post summary
The post announces CVE-2026-32985, detailing an unauthenticated arbitrary file upload flaw in Xerte Online Toolkits' template import feature, with a link to the official CVE record.
🔴 CVE-2026-32985 - Critical Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality. The issue exists in /website_code/php/... https://www.thehackerwire.com/vulnerability/CVE-2026-32985/ https://t.co/g4YWIuJzX8
Post summary
The post discloses CVE-2026-32985 as an unauthenticated arbitrary file upload vulnerability in Xerte Online Toolkits 3.14 and earlier, detailing the affected functionality but providing no exploit, patch, or active exploitation information.
🚨 CVE-2026-32985: Xerte Online Toolkits <= 3.14 Un... Unauthenticated ZIP upload bypass in Xerte's import.php drops webshells directly into USER-FILES/ - classic path traver... https://zerodaysignal.com/vulnerability/CVE-2026-32985 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces CVE-2026-32985, a vulnerability in Xerte Online Toolkit that allows unauthenticated ZIP upload bypass and webshell deployment via path traversal.
[CVE-2026-32985: CRITICAL] Unauthenticated file upload vulnerability in Xerte Online Toolkits (versions 3.14 and earlier) allows attackers to achieve remote code execution. #CyberSecurity#cve,CVE-2026-32985,#cybersecurity https://cvefind.com/CVE-2026-32985
Post summary
A critical unauthenticated file upload vulnerability in Xerte Online Toolkits enabling remote code execution has been disclosed; no exploit, patch, or active exploitation details are included.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apereo | xerte_online_toolkits | - | - | - |