What is GHSA-7xv4-f5x2-3xqj?

GHSA-7xv4-f5x2-3xqj is a security advisory published by GitHub Security Advisories with Critical severity. EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability....

Which CVE IDs does GHSA-7xv4-f5x2-3xqj cover?

GHSA-7xv4-f5x2-3xqj covers the following CVE IDs: CVE-2026-80235. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7xv4-f5x2-3xqj?

GHSA-7xv4-f5x2-3xqj has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-7xv4-f5x2-3xqjCriticalCVSS 9.8

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability....

Vendor

GitHub Security Advisories

Published

August 26, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-80235 →

📋 Description

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-80235
https://www.twcert.org.tw/en/cp-139-11137-c6e5f-2.html
https://www.twcert.org.tw/tw/cp-132-11133-e0167-1.html
https://github.com/advisories/GHSA-7xv4-f5x2-3xqj