Is CVE-2026-67243 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-67243?

CVE-2026-67243 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-67243

Description

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.