CVE-2026-6211

Arbitrary File Upload in Global IT's WEOLL

CVSS 8.7 HIGHEPSS 0.2%CWE-434

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Jun 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WEOLL: from 2.0.9 before 3.2.45.33.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Affected products

Global IT Informatics Services Inc. · WEOLL

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0369