TI-2024-13030 CVE-2024-14037 · GHSA-fmvm-hq3c-x9g9Redsea Cloud eHR Unauthenticated File Upload RCE via PtFjk.mobPriority HIGH 81Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01281 · Published 2026-07-02 · No fix listed CWE-434