CVE•Published 2026-10-27•Modified 2026-10-27•0 articles on news•5 live references•NVD data
CVE-2026-4337
Vulnerability data via NVD (ingested)
CVSS v3.1
—
EPSS percentile
—
Weaknesses (CWE)
Description
Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could also allow them to delete files.
Timeline
Published 2026-10-27
Modified 2026-10-27
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
More intel sources (5)
Shodan report
vuln:CVE-2026-4337Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-4337Censys host search filtered to this CVE id.
grep.app
CVE-2026-4337Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-4337GitHub code search for direct mentions.
Google dork
"CVE-2026-4337" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-43378 repos
xpaysh/awesome-x402unknown
🚀 Curated list of x402 resources: HTTP 402 Payment Required protocol for blockchain payments, crypto micropayments, AI agents, API monetization. Includes SDKs (TypeScript, Python,…
andrew/ultimate-awesomeunknown
Every awesome list on every topic, including awesome lists of awesome lists, updated daily.
nirholas/lyra-intelPython
Lyra Intel is an intelligence platform designed to analyze repositories of any size - from small projects to enterprise monorepos with millions of lines of code. With 70+ component…
zenfish/zipmiPython
Yet Another ipmi command line tool+
dioptx/awesome-mcp-servers-bakunknown
A collection of MCP servers.
jerelvelarde/awesome-openclaw-appsunknown
blairmichaelg/secbrainSolidity
Multi-agent AI security bounty system with DeFi exploit protection templates, Solidity auditing, and guarded tooling.
CitrateNetwork/.githubShell
Org-level CI workflows + profile README for CitrateNetwork
We haven't classified any articles referencing CVE-2026-4337 yet. The external references above still apply.