Refirio vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Refirio products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-67243 High · 7.2 CWE-434 Aug 4, 2026

Unrestricted Upload of File with Dangerous Type in Refirio Freo2

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.