CVE-2026-4536
Acrel Environmental Monitoring Cloud Platform unrestricted upload
- State
- Published
- Severity
- 6.9 Medium
- Published
- Mar 22, 2026
- Updated
- Mar 23, 2026
- Reserved
- Mar 21, 2026
Description
A vulnerability was found in Acrel Environmental Monitoring Cloud Platform 1.1.0. This issue affects some unknown processing. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 7.3 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 7.5 High | AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Environmental Monitoring Cloud PlatformAcrel |
|
References
- VDB-352324 | Acrel Environmental Monitoring Cloud Platform unrestricted uploadvdb-entry
- VDB-352324 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #774423 | Acrel Co., Ltd 安科瑞环保用电监管云平台 1.1.0 Unauthorized File Upload Vulnerabilitythird-party-advisory
- https://github.com/LTX-GOD/Mycve/blob/main/Acrel_Co_Ltd.mdbroken-linkexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.