Vulnerabilities

TI-2026-16098 CVE-2026-19852 · GHSA-q3pc-8mvq-c8v3

CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload

LOW 23

NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00327 Published 2026-08-24 No fix listed CWE-434

TI-2026-16099 CVE-2026-19853 · GHSA-wg72-7cgc-92mc

CyberTutor｜NewSiteServer (NSS) - Missing Authentication

LOW 37

NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00473 Published 2026-08-24 No fix listed CWE-306

TI-2025-11787 CVE-2025-12868 · GHSA-3j85-7795-mc66

CyberTutor｜New Site Server - Use of Client-Side Authentication

MEDIUM 49

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00551 Published 2025-11-10 No fix listed CWE-603

Vulnerabilities

Filters

CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload

CyberTutor｜NewSiteServer (NSS) - Missing Authentication

CyberTutor｜New Site Server - Use of Client-Side Authentication