Is CVE-2026-73328 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-73328?

CVE-2026-73328 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-73328

Description

Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files via the /upload/send/ endpoint. Attackers can submit base64 fileContent with a .php fileName into the web root and request it to execute code as the web server user.