← Database

CVE-2025-15228

CRITICAL CVSS: 9.8 Published: 2025-12-29 Modified: 2026-06-17

Description

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Affected Platforms

Welltend Bpmflowwebkit

Weakness Type

CWE-434

References