CVE-2026-73996Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-masteriyo-lms-plugin-2-3-2-arbitrary-file-upload-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-08-18); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-73996

Full discourse2 posts

DFIR Lab@DFIR_Lab38d
Disclosure
🚨 CRITICAL: CVE-2026-73996 (CVSS 9.8) - Unauthenticated arbitrary file upload in Masteriyo LMS ≤ 2.3.2. Network exploitable, no auth required. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/6oF5oRJkGI
Post summary
The tweet announces CVE-2026-73996, highlighting a critical unauthenticated file upload flaw in Masteriyo LMS and urging immediate patching, but it does not provide patch details, PoC, or evidence of active exploitation.
0000031
115 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-73996 Unauthenticated Arbitrary File Upload in Masteriyo - LMS Versions Up To 2.3.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-73996
Post summary
The entry announces a new unauthenticated arbitrary file upload vulnerability in Masteriyo LMS, providing basic details but no PoC, exploit code, patch, or evidence of active exploitation.
0000095
4.1K followersView on X

Explore more

Back to dashboard