Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.4.5.1 is able to resolve this issue. This patch is called 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3749 A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core… https://www.cve.org/CVERecord?id=CVE-2026-3749
Post summary
A weakness in Bytedesk version up to 1.3.9 affecting the `handleFileUpload` function has been disclosed; no PoC, exploit, active exploitation, or patch information is provided.
CVE-2026-3749 Unrestricted SVG File Upload Vulnerability in Bytedesk Through 1.3.9 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3749
Post summary
A new unrestricted SVG file upload vulnerability (CVE‑2026‑3749) has been identified in Bytedesk version 1.3.9.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bytedesk | bytedesk | - | - | - |