PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-50768 T-Systems International GmbH CVE debrief

CVE-2026-50768 debrief based on the supplied source corpus. The vulnerability is a File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1, which allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function. Defenders should assess exposure and potential impact due to the high CVSS score and potential for arbitrary code execution. The CVE record and NVD entry provide limited information about the vulnerability, and defenders should prioritize verifying exposure and assessing potential impact.

Vendor
T-Systems International GmbH
Product
ImageMaster
CVSS
HIGH 8.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-17
Original CVE updated
2026-09-09
Advisory published
2026-08-17
Advisory updated
2026-09-09

Who should care

Defenders responsible for T-Systems International GmbH ImageMaster systems should assess exposure and potential impact due to the high CVSS score and potential for arbitrary code execution. This includes operators, platform administrators, vulnerability management teams, and security teams who need to review compensating controls and monitor for potential exploitation attempts.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact due to the high CVSS score and potential for arbitrary code execution

  • Potential arbitrary code execution
  • Possible unauthorized access to sensitive data
  • Potential disruption of business operations

Technical summary

File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function. The vulnerability has a high CVSS score of 8.8 and a severity of HIGH. Defenders should prioritize verifying exposure and assessing potential impact due to the potential for arbitrary code execution.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact

Recommended defensive actions

  • Verify exposure to the vulnerability
  • Assess potential impact on the organization
  • Monitor for potential exploitation attempts

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. The CVE record was published on 2026-08-17T18:17:08.760Z and has not been modified since then. The NVD entry provides a CVSS score of 8.8 and a severity of HIGH. However, the entries lack detailed information on affected scope, severity, and vendor guidance. Defenders should verify exposure and assess potential impact based on the available information.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-50768 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-50768

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-50768 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-50768

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.