CVE-2026-88738

Summary

The Jazzware RT1000 Edge webUI v. 20.0.1 allows an attacker with administrative privileges to upload a server-side executable file, leading to remote code execution.

Exploitability

Exploitation requires administrative privileges and access to the upgrade package upload functionality. The vulnerability is relatively straightforward to exploit once the attacker gains the necessary access.

Blast radius

If exploited, the vulnerability could result in complete control over the affected system, including data exfiltration, further exploitation, and disruption of services.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the upgrade package upload functionality or restrict access to this feature to users with administrative privileges.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.