CVE-2026-67243

Description

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.

CVSS Vector

References

• https://github.com/refirio/freo2/commits/main/
• https://jvn.jp/en/jp/JVN52865575/