CVE-2026-92820

{
  "etk_id": "ETK-2026-307",
  "cve_id": "CVE-2026-92820",
  "display_id": "CVE-2026-92820",
  "ghsa_id": "GHSA-3v9p-5xxf-6hxg",
  "euvd_id": "EUVD-2026-91175",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Arbitrary file operations in Ninja Forms - File Uploads",
  "summary": "Ninja Forms - File Uploads through version 3.3.34 can allow unauthenticated requests to access, replace, or remove server files through its external Amazon S3 upload handling. Exposure requires the External File Upload action to be enabled; email notifications configured to attach uploaded files add a file-read path.",
  "mitigation": "Disable the External File Upload (Amazon S3) action on affected forms until an updated plugin release is available. Remove upload attachments from form email notifications to reduce file-read exposure.",
  "vendor": "SaturdayDrive",
  "product": "Ninja Forms - File Uploads",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.3.34"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Ninja Forms - File Uploads",
      "purl": null
    }
  ],
  "cwes": [
    434
  ],
  "cvss_score": 8.1,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0052,
  "epss_percentile": 0.4291,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 34.331486633333334,
  "t0_at": "2026-10-02T05:30:15.764000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-03T13:17:44.695267+00:00",
      "days": 1.3246404081828704,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T05:30:15.764000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-02T05:30:15.764000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T05:30:15.764000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92820"
    }
  }
}